PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

volexity.com | research | #vulnerability-research | #threat-intelligence | #microsoft | #phishing | #apt | #russia | #device-code-phishing | #cozylarch | #uta0304 | #uta0307 | #volexity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication February 13, 2025 Charlie Gardner, Steven Adair, and Tom Lancaster Starting in mid-January 2025, Volexity identified...
Published
Collected

Related coverage

research · volexity.com
Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows
# Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows April 22, 2025 Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, and Tom Lancaster Since...
research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
vulnerability · volexity.com
Patchwork APT Group Targets US Think Tanks
In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent […]
research · volexity.com
Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks
# Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks December 4, 2025 Matthew Meltzer, Steven Adair, and Tom Lancaster In early 2025, Volexity...
research · volexity.com
Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns
On May 25, 2021, Volexity identified a phishing campaign targeting multiple organizations based in the United States and Europe. The following industries have been observed being targeted thus far: NGOs […]
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
Back