Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

VolexityApril 22, 2025Threat Intel Cloud Identity

Since early March 2025, Volexity has observed multiple suspected Russian threat actors conducting highly targeted social engineering operations aimed at gaining access to the Microsoft 365 (M365) accounts of targeted […] The post Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows appeared first on Volexity .

Summary from Volexity.

Read the full article at Volexity

Explained

The technology and terms in this story. Learn more

AttackPhishingMessages that impersonate someone trusted to get people to click, log in or pay.

Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

Explained

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Sponsored: Should your threat hunt become a detection?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet