Microsoft's Threat Intelligence team has identified Storm-2657, a threat actor targeting U.S. organizations, particularly universities, to hijack employee accounts and redirect salary payments. The attackers use phishing emails with adversary-in-the-middle techniques to harvest credentials and MFA codes, gaining access to HR

3m read timeFrom thehackernews.com
Post cover image

Sort: