You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
dadsec
About this tag
Dadsec, also tracked as Storm-1575, is a cybercriminal operation that leverages the Tycoon2FA Phishing-as-a-Service (PhaaS) toolkit to target Microsoft 365 credentials. Beginning in August 2023, Dadsec's campaigns represent a convergence of advanced phishing toolkits and specialized criminal infrastructure, posing significant challenges for enterprise defenders. Discussions on WindowsForum cover the technical evolution of Dadsec's methods, including its use of adversary-in-the-middle techniques to bypass multi-factor authentication. The tag aggregates threads analyzing Dadsec's tactics, infrastructure, and implications for enterprise security, making it a resource for IT professionals tracking sophisticated credential theft operations.
The rapid evolution of cybercrime has brought forth a new era of sophisticated phishing operations, with attackers now leveraging complex “Phishing-as-a-Service” (PhaaS) platforms to target lucrative enterprise networks. One such operation, identified in research as Storm-1575 and more widely...