Attackers Weaponize Passkey Phishing for Microsoft Cloud Account Takeovers and Data Exfiltration
Threat actors leverage passkey phishing and CEO impersonation to breach Microsoft Cloud accounts, exfiltrate data, and bypass MFA.
FBI Alerts: Kali365 Phishing Kit Exploits Microsoft 365 OAuth for Persistent Access
FBI warns about Kali365, a fast-growing phishing kit abusing Microsoft 365 device authorization for persistent, surreptitious access.
New Wave of AiTM Phishing: Sophisticated Attacks Target TikTok for Business Accounts, Bypassing MFA
Sophisticated AiTM phishing campaign targets TikTok for Business, bypassing MFA to hijack sessions and compromise ad accounts.
Sophisticated Deception: How Virtual Phones Dismantle Bank Security Protocols
Criminals leverage virtual devices to bypass bank fraud checks, exploiting vulnerabilities in device fingerprinting and MFA.
Zero Lessons Learned: Convicted Scammer Allegedly Orchestrates New Phishing Campaign from Federal Prison
Convicted scammer Kwamaine Jerell Ford allegedly ran a sophisticated athlete-focused phishing scam from federal prison, compromising iCloud and MFA.
Starkiller: The Next-Gen Phishing Service Bypassing MFA with Reverse Proxy Stealth
Deep dive into Starkiller, a sophisticated phishing-as-a-service utilizing reverse proxies to bypass MFA and harvest credentials.
Mandiant Uncovers Sophisticated ShinyHunters Vishing Campaign Targeting MFA-Protected SaaS Platforms
Mandiant reveals ShinyHunters-style vishing attacks bypass MFA to breach SaaS, emphasizing advanced social engineering and credential harvesting.