Ransom Busters Scam Targets Ransomware Victims with Fake Data Deletion Services
A threat actor calling itself 'Ransom Busters' is targeting ransomware victims with a novel extortion scheme, offering to delete stolen data from…
Tag: Microsoft 365
Cavern C2 Framework Evolves with DNS and Google Apps Script to Evade Detection
Cybersecurity researchers have uncovered new components in the Cavern (aka Cav3rn) command-and-control (C2) framework, used by Iranian nation-state hackers in attacks targeting…
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to the data extortion group…
Microsoft 365 AitM Phishing Campaign Hijacks Accounts to Steal Payroll and Finance Emails
Cybersecurity researchers at Arctic Wolf Labs have uncovered a widespread email-driven phishing campaign that uses adversary-in-the-middle (AitM) techniques to compromise Microsoft 365…
Storm-2755: Payroll Pirate Threat Cluster
Storm-2755 is a financially motivated threat cluster tracked by Microsoft, also known as Payroll Pirates. It hijacks employee accounts to reroute salary…
Storm-2657: Related Phishing Activity
Storm-2657 is a threat actor tracked by Microsoft, associated with phishing campaigns targeting Microsoft 365 accounts. Documented since early 2025, it shares…
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has expanded its capabilities to include device code phishing, a technique that abuses the…
Microsoft Copilot for Word Vulnerability Allows Hidden Prompt Injection and Propagation
Security researcher Håkon Måløy disclosed a prompt injection vulnerability in Microsoft 365 Copilot for Word that allows hidden instructions in a document…
Nimbus Manticore Deploys NightLedger Backdoor and WebSocket Tunnelers in Multi-Region Espionage Campaign
Iranian state-backed hacking group Nimbus Manticore (also known as GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been linked to…
Police Dismantle Kratos Phishing Kit Targeting Microsoft 365 Sessions and Bypassing MFA
German and US law enforcement, in coordination with Indonesian authorities, have dismantled the infrastructure behind Kratos, a sophisticated phishing kit designed to…