Microsoft 365 phishing

From Cyber Security News – Morphing Meerkat PhaaS Using DNS Reconnaissance To Generate Phishing Pages Based on Target

Morphing Meerkat, a sophisticated Phishing-as-a-Service (PhaaS) platform first identified in 2020, has evolved from a simple tool capable of mimicking five email services to a comprehensive cybercriminal resource offering more…

shaikh Saqib April 8, 2025

News

From Dark Reading – Evilginx Tool (Still) Bypasses MFA

Based on the open source NGINX Web server, the malicious tool allows threat actors to steal user credentials and session tokens. Read More

shaikh Saqib March 29, 2025

News

From Cyber Security News – New Sophisticated Phishing Attack Exploiting Microsoft 365 Infrastructure To Attack Users

A sophisticated new phishing campaign has been discovered that exploits Microsoft 365’s legitimate infrastructure to conduct highly convincing credential harvesting and account takeover attempts. Unlike traditional phishing attempts that rely…

shaikh Saqib March 18, 2025

News

From Dark Reading – OAuth Attacks Target Microsoft 365, GitHub

In a cyber twist, attackers behind two of the campaigns are using the apps to redirect users to phishing and malware distribution sites. Read More

shaikh Saqib March 18, 2025

News

From Security Week – Microsoft 365 Targeted in New Phishing, Account Takeover Attacks

[[{"value":"Threat actors are abusing Microsoft 365 infrastructure in a BEC campaign, and target its users in two brand impersonation campaigns. The post Microsoft 365 Targeted in New Phishing, Account Takeover…

shaikh Saqib March 17, 2025

News

From Cyber Security News – BlackLock Ransomware Hacked 40+ Organization Within Two Months

BlackLock ransomware has emerged as one of the most notorious cybersecurity threats of 2025, compromising more than 40 organizations within just two months. The fast-rising ransomware group has targeted victims…

shaikh Saqib March 17, 2025

Vulnerabilities

From Cybersecurity Help – Russian hackers target Microsoft accounts with ‘Device code’ phishing attacks

The Russian threat actors leveraged social engineering techniques to impersonate individuals from prominent institutions. Read More

shaikh Saqib February 17, 2025