OfficeHome

Reported Context (2)

The AitM phishing chain used by TA419 targets Microsoft 365 / Entra ID through the first-party OfficeHome application (client_id=4765445b-32c6-49b0-83e6-1d93765276ca). China-Aligned TA419 Uses Impersonation and AiTM Phishing to Target U.S. AI Policy Experts
VPN node, attempted to authenticate to the corporate VPN, and accessed several Azure apps, including OfficeHome, Azure Portal, and SharePoint Online. TeamFiltration Campaign Password-Sprays Forgotten Microsoft 365 Service Accounts in Chile

People (1)

Threat Actors (3)

MITRE ATT&CK (7)

Vendors (4)

Products (9)

Tools (4)

Industries (6)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.