Microsoft

Reported Context (1411)

on its own, so the operator needed no Azure account on the victim’s side, and the traffic went to a Microsoft storage endpoint that outbound filtering rarely blocks. Hexastrike Details S5PIVOT Proxy in Qilin Ransomware Intrusion
Microsoft Defender detections Microsoft Reports Storm-3358 Using ARTEX to Target Financial Organizations
is largely due to the tactic’s integration into Phishing as a Service (PhaaS) kits, which according to Microsoft has enabled threat actors to further integrate and scale this technique across their attack chains for CIS Details Device Code Phishing’s Growth and Impact on U.S. SLTTs
Fake OpenAI and SpaceX event invites phish Microsoft and Google accounts Security Roundup: Flowise Exploitation, AI Credential Theft and SAP Risks
Google, Microsoft, Apple, Amazon, your bank. Suddenly everyone wants you to create a passkey. You click “Not now”, and next time the pop-up is back. How Passkeys Work—and Where Their Security Limits Are

CVE (2028)

Malware (955)

People (966)

Threat Actors (769)

MITRE ATT&CK (423)

Vendors (740)

Products (2429)

Tools (910)

Industries (357)

Countries (141)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.