DEBULL: Phishing-as-a-Service Platform for Device Code Attacks
DEBULL is a reusable tooling layer that packages Storm-2372-style identity tradecraft into a PhaaS platform. It provides campaign-facing and operator-facing infrastructure, using…
Tag: Microsoft 365
GraphSpy: Post-Exploitation Tool for Microsoft 365 and Entra
GraphSpy is a tool used for post-exploitation of Microsoft 365 and Entra environments, often integrated into PhaaS platforms like DEBULL. It enables…
Microsoft 365: Impersonated in Phishing Templates
Microsoft 365 is a cloud productivity suite whose login pages are impersonated in phishing templates used by UNC6671 to steal credentials.