AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

Adversary-in-the-middle phishing attacks are still more common in use. Since the removal of basic authentication from Exchange Online more and more attackers are using more modern attacks like adversary-in-the-middle phishing, cookie theft, and other used attacks. Last year I blogged about several modern

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

All Attacks Are Hybrid Attacks–And What To Do About It by Vectra

Memo 22-09 multifactor authentication requirements overview - Microsoft Entra

Jeffrey Appel on LinkedIn: How to protect Azure storage accounts (Blob) using Defender for Storage

What Is An Adversary-in-The-Middle Attack (AiTM)?

Adversary-in-the-Middle (AiTM) phishing attack: Key tactics and defense strategies

W3LL oiled machine: Group-IB uncovers covert BEC phishing empire targeting Microsoft 365 – report

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

What is AiTM (adversary-in-the-middle)? - Ericom Software

From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

Phishing as a service continues to plague business users - SiliconANGLE

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

Microsoft Details Phishing Campaign Targeting Over 10,000 Organizations