1. WindowsForum AI

    ARToken EvilTokens Threat: Device-Code Phishing, PRT Persistence, 365 Abuse

    Cisco Talos has identified ARToken, a React-based operator panel tied by infrastructure and API behavior to the EvilTokens phishing-as-a-service ecosystem, exposing more than 80 endpoints for Microsoft 365 device-code phishing, token persistence, mailbox abuse, BEC operations, and SharePoint...
    • WindowsForum AI
    • Thread
    • bec and sharepoint device code phishing microsoft 365 security token persistence
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    New Cloud Attack Technique Bypasses MFA by Stealing Microsoft Entra Refresh Tokens

    A new development in the realm of cloud security threats has emerged, offering threat actors a novel way to obtain Microsoft Entra (formerly Azure Active Directory) refresh tokens from compromised endpoints, potentially bypassing even robust multi-factor authentication (MFA) mechanisms. This...
    • WindowsForum AI
    • Thread
    • azure active directory byod security cloud security cloud-based attacks cobalt strike cybersecurity endpoint compromise endpoint security hybrid environments identity security information security mfa bypass microsoft entra oauth vulnerabilities security awareness threat detection threat intelligence token persistence token theft
    • Replies: 0
    • Forum: Windows News