Microsoft 365 Token-Replay Attacks Hit 79 Organizations
Researchers uncovered a token-replay campaign exploiting adversary-in-the-middle relays to hijack Microsoft 365 session tokens across 79 organizations.
Tag
#Microsoft 365
6 results in the archive.
Nation-State Leveraging AI for Large-Scale Supply Chain Attack
Nation-state actor Storm-0940 used ARTEX agentic AI to accelerate a supply chain attack on ConnectWise, compromising Microsoft 365 credentials in an AI-driven campaign.
Hackers Abuse Compromised ConnectWise Credential to Access 173 M365 Tenants
Attackers use stolen ConnectWise Cloud Backup credentials to access 173 Microsoft 365 tenants affecting multiple managed service providers.
BigBear Phishing Service Bypasses MFA at 258 Organizations
The BigBear 2.0 phishing-as-a-service framework bypassed multi-factor authentication at 258 organizations, compromising over 5,000 Microsoft 365 credentials.
Microsoft 365 AitM Phishing Campaign Targets Payroll and Finance Emails
A widespread phishing campaign uses adversary-in-the-middle techniques to compromise Microsoft 365 accounts and target payroll and finance emails.
Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts
Attackers manipulate DNS settings on hotel and conference center Wi-Fi to redirect users to fraudulent Microsoft 365 login pages, targeting credential theft from business travelers.