Kali365 targets US organizations with attacker-controlled device codes, potentially exposing Microsoft 365 email, files, and ...

A Storm-2945 campaign layers device code phishing onto hijacked hotel Wi-Fi to bypass MFA on Microsoft 365 accounts. Here's ...

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts.

Hotel Wi-Fi hack targeting Microsoft 365 accounts has turned captive portal gateways at hotels and conference centers in the US, India, and Saudi Arabia into credential-theft infrastructure; DNS ...

Hackers are changing hotel Wi-Fi DNS settings to redirect travelers to fake Microsoft 365 login pages and steal account access.

The Telegram-distributed service combines AI-assisted lures with device-code phishing and attacker-side session refresh, complicating containment after an account is breached.

New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA prompts to maintain access.

Hackers are compromising hotel Wi-Fi gateways to redirect business travelers to fake Microsoft 365 login pages that can ...

The sign-in prompt in Office 365 or Microsoft 365 desktop apps may say device TPM problem, Trusted Platform Module ...