Threatline

Multiple suspected Russia-linked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025. The highly targeted social engineering operations, per Volexity, are a shift from previously documented attacks that leveraged a technique known as device code

microsoft ukraine russian hackers oauth

23 more topics

target allies signal whatsapp multiple threat actors individuals organizations ties rights aim gain access accounts march operations volexity shift attacks technique device

code