Phishing campaign targets Microsoft 365 accounts

Cybersecurity researchers have identified an active and widespread phishing campaign targeting Microsoft 365 accounts. This campaign employs a technique known as Adversary-in-the-Middle (AitM) to gain control over user accounts. The goal is to identify key individuals in financial workflows and collect their emails.

The attackers use residential proxies to disguise malicious logins as regular consumer traffic. This makes it difficult for security measures to detect the harmful activities. The use of residential proxies allows the attackers to pose as legitimate users, thereby increasing the likelihood that their attempts will be successful.

The campaign specifically targets companies that use Microsoft 365 for their communication and financial management. The attackers aim to gain access to sensitive information that can be used to carry out fraudulent activities. This includes, among other things, payroll information and financial transactions.

The researchers warn that this type of phishing attack is becoming increasingly common in today's digital landscape. The combination of AitM techniques and the use of residential proxies poses a serious threat to companies that rely on cloud-based services. The attackers are often well-organized and use advanced methods to achieve their goals.

Risks for Companies and Employees

The risks associated with this phishing campaign are significant. Companies could not only suffer financial losses but also jeopardize their reputation. If confidential information falls into the wrong hands, it can lead to a loss of trust among customers and partners.

For employees, this means they must be particularly vigilant. The attackers may attempt to impersonate IT support or other trusted sources to obtain their login credentials. Training to raise awareness of phishing attacks is therefore essential to protect employees.

The security researchers recommend that companies review and adjust their security protocols as necessary to better prepare against such attacks. This includes implementing multi-factor authentication and regularly reviewing login credentials. These measures can help minimize the risk of a successful attack.

The phishing campaign highlights the importance of staying continuously informed about the latest threats in the field of cybersecurity. Companies must act proactively to protect their systems and data. The threat posed by AitM techniques is expected to continue to grow as attackers develop increasingly sophisticated methods.

Current statistics show that phishing attacks have increased significantly in recent years. According to reports, companies using Microsoft 365 are particularly vulnerable to such attacks. The combination of the platform's popularity and weaknesses in its security architecture makes it a preferred target for cybercriminals.