Tag: AiTM
Phishing kit rides genuine Docusign mail to swipe Microsoft sessions
The NovaCookies phishing service uses genuine Docusign notifications to steal Microsoft 365 sessions in real time.
Voicemail lures fuel AitM wave aimed at payroll inboxes
A voicemail-themed AitM phishing wave is taking over Microsoft 365 accounts to harvest payroll and finance email.
Adversary in the Middle Campaign Bypasses MFA on Enterprise Cloud Platforms
The AiTM tactic uses a real time proxy to steal authentication tokens after the user completes MFA, bypassing one of…