Spear-Phishers Leverage Office 365 Ecosystem to Validate Stolen Creds in Real Time
Written by Ericka Chickowski – September 11th, 2020 New attack technique uses Office 365 APIs to cross-check credentials against Azure Active Directory as victim types them in. Serving as yet another proof point of the creativity with which attackers are targeting Office 365 users with new phishing schemes, Armorblox researchers yesterday detailed a new attack technique they ...


