A now-patched Android flaw let a rogue app pose as Teams and collect work account tokens from Microsoft Authenticator. Here is how it worked and what to check.
Tag:
Microsoft 365
-
-
An attacker used a credential for ConnectWise’s Cloud Backup app to sign in to Microsoft 365 tenants one by one. Here is what happened and the checks to run this …
-
Attackers are phoning executives, posing as IT support, to steal Microsoft 365 logins. Four cheap checks close most of the gap this technique relies on.
-
The Kratos phishing kit stole Microsoft 365 session cookies to bypass MFA entirely. Here’s exactly how that attack works, and the practical steps that actually reduce the risk.