Threat actors are abusing Microsoft 365 infrastructure in a BEC campaign, and target its users in two brand impersonation ...

Starting in December 2024, leading up to some of the busiest travel days, Microsoft Threat Intelligence identified a phishing ...

Cybercriminals are promoting malicious Microsoft OAuth apps that masquerade as Adobe and DocuSign apps to deliver malware and ...

This spoofed email will appear to the user to have come from simply “Co-pilot.” Users may have some familiarity with using Copilot to perform a myriad of tasks such as transcribing emails or drafting ...

Microsoft warns of a phishing campaign using ClickFix to spread malware via fake Booking.com emails. Attackers exploit fake ...

If you work in hospitality and find an email in your inbox from Booking.com claiming to be an angry guest, then watch out — it may well be part of a phishing scam. Microsoft has warned that a phishing ...

The FBI and CISA have issued a warning about the Medusa ransomware, which uses phishing to steal credentials and employs a ...

Cybersecurity researchers Proofpoint detailed their findings in an X thread, revealing unidentified cybercriminals used compromised Office 365 accounts and email addresses belonging to charity ...

Microsoft said the campaign was now posing a ‘tangible threat’ to UK-based hospitality and travel organisations.

The Threat Intelligence report revealed that the campaign uses a social engineering technique called ClickFix.

Microsoft warns of a new phishing campaign impersonating Booking.com It is targeting businesses in the hospitality industry The goal is to deploy infostealers and trojans Hotels, resorts ...

A cybercrime group named Storm-1865 has targeted hospitality organizations via fake Booking.com emails and the use of social ...