Synthèse
Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
Source originale
darkreading.com
Attackers call employees’ personal phones to break into Microsoft 365 accounts ↗
helpnetsecurity.com · 10 sept.
IT help-desk vishing tricks executives into handing over Microsoft 365 access ↗
helpnetsecurity.com · 8 sept.
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks ↗
thehackernews.com · 7 sept.