Adversary-in-the-middle (AiTM) Archives - ThreatsHub Cybersecurity News

File hosting services misused for identity phishing

October 8, 2024 TH Author Adversary-in-the-middle (AiTM), Credential Theft, token theft

Since mid-April 2024, Microsoft has observed an increase in defense evasion tactics used in campaigns abusing file hosting services like SharePoint, OneDrive, and Dropbox. These campaigns use sophisticated techniques to perform social engineering, evade detection, and compromise identities, and include business email compromise (BEC) attacks.
The post File hosting services misused for identity phishing appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction

October 25, 2023 TH Author Adversary-in-the-middle (AiTM), Credential Theft, elevation of privilege, extortion, human-operated ransomware, ransomware as a service, Tempest

Microsoft has been tracking activity related to the financially motivated threat actor Octo Tempest, whose evolving campaigns represent a growing concern for many organizations across multiple industries.
The post Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction appeared first on Microsoft Security Blog. READ MORE HERE…