Identity · InfosecFeed Brief

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

What you need to know

Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with an aim to identify key personnel involved in financial workflows and gather related email. "The campaign uses residential proxies to disguise malicious…

Source transparency

This is an InfosecFeed curated brief based on reporting from The Hacker News. InfosecFeed does not claim ownership of the original reporting.

Read the original report at The Hacker News ↗