PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

volexity.com | research | #vulnerability-research | #threat-intelligence | #phishing | #apt | #oauth | #russia | #ukraine | #m365 | #microsoft-365 | #device-code-phishing | #volexity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows April 22, 2025 Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, and Tom Lancaster Since...
Published
Collected

Related coverage

research · volexity.com
Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks
# Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks December 4, 2025 Matthew Meltzer, Steven Adair, and Tom Lancaster In early 2025, Volexity...
research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
research · hunt.io
Ukraine’s State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell
An exposed open directory revealed a solo operator's full Log4Shell chain against a Graylog host holding Trembita logs, with the access log that proves execution.
vulnerability · volexity.com
Patchwork APT Group Targets US Think Tanks
In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent […]
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
research · volexity.com
Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication
# Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication February 13, 2025 Charlie Gardner, Steven Adair, and Tom Lancaster Starting in mid-January 2025, Volexity identified...
Back