Product
OneNote
- First Reported
- Mar 22, 2023
- Latest Reported
- May 20, 2026
Reported Context (2)
- reconnaissance against SharePoint (payment, credentials) and propagated phishing further by sharing OneNote notebooks containing CodeStorm lure links with internal and external contacts. CodeStorm AiTM Kit Targets Microsoft 365, Steals MFA and Session Tokens
- Emotet resumes spam operations, switches to OneNote Emotet Resumes Spam Campaign, Shifts from Word Documents to OneNote
Malware (1)
People (3)
Threat Actors (2)
MITRE ATT&CK (29)
Vendors (4)
Products (23)
Tools (7)
Industries (11)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.