AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

Adversary-in-the-middle phishing attacks are still more common in use. Since the removal of basic authentication from Exchange Online more and more attackers are using more modern attacks like adversary-in-the-middle phishing, cookie theft, and other used attacks. Last year I blogged about several modern

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

New AiTM Phishing Attack That Bypasses MFA Sets Sights On Microsoft Email Users

Swedish Windows Security User Group » phishing

Detection Engineering Weekly #31 - MOVEit, get out the way

Bluepurple Pulse: week ending July 9th - by Ollie

AiTM phishing attacks: What to do when MFA is not enough

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud

EvilProxy Phishing-as-a-Service Broadens AitM Cyberthreat

Microsoft accounts targeted with new MFA-bypassing phishing kit

AiTM Phishing Attacks: Stolen Session Cookie Creates Havoc in Financial Organizations

EvilProxy Exploits indeed.coms Open Redirect for Microsoft 365 Phishing

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign