Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Summary

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information technology (IT) help desk vishing, adversary-in-the-middle (AitM) token theft, and residential-proxy sign-ins. The activity, which mainly singles out directors, vice presidents, and other executive staff

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.