Friday August 11, 2023
I've Been Thinking:

A Russian government-linked hacking group took aim at dozens of global organizations with a campaign to steal login credentials by engaging users in Microsoft Teams chats pretending to be from technical support. This information was announced by Microsoft researchers and security experts.

Microsoft explains that these "highly targeted" social engineering attacks have affected "fewer than 40 unique global organizations" since late May.

By way of a blog, Microsoft researchers added that the company was investigating the breach. The Russian embassy in Washington did not immediately respond to a request for comment.

According to the Microsoft researchers, the plan worked this way: Hackers set up domains and accounts that looked like technical support and tried to engage teams and users in chats and get them to approve multifactor authentication (MFA) prompts.

According to a statement released by Microsoft: "Microsoft has mitigated the actor from using the domains and continues to investigate this activity and work to remediate the impact of the attack."

Read my latest book THUGS. It's easy. Just click.
http://www.amazon.com/s/ref=nb_ss_gw?url=search-alias%3Daps&field-keywords=halpern%2C+micah

To reprint my essays contact sales (at) www.featurewell.com