AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

Adversary-in-the-middle phishing attacks are still more common in use. Since the removal of basic authentication from Exchange Online more and more attackers are using more modern attacks like adversary-in-the-middle phishing, cookie theft, and other used attacks. Last year I blogged about several modern

What is an Adversary-In-The-Middle (AiTM) Phishing Attack? - 1Kosmos

From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud

From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud

AiTM phishing attacks: What to do when MFA is not enough

Pawel Partyka (@Pawp81) / X

Netskope Threat Coverage: Microsoft Discloses New Adversary-in-the-Middle ( AiTM) Phishing Attack - Netskope

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

Protecting Enterprises Against Phishing and Business Email Compromise (BEC) Attacks - Spiceworks

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

Microsoft Warns of Adversary-in-the-Middle Uptick on Phishing Platform - Infosecurity Magazine

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)