Microsoft has spotted a new phishing attack vector in the wild Storm-2372 is stealing access tokens through Microsoft Teams The group has been linked to Russia with medium confidence A new ...

Microsoft researchers discovered that since last August, Storm-2372 abuses this authentication flow by tricking users into entering attacker-generated device codes on legitimate sign-in pages.

Microsoft Threat Intelligence warns that government, NGOs, defence, energy and technology sectors are the focus of Russia-linked Storm-2372 threat actor Microsoft Threat Intelligence has warned of ...