ThreatVectr
Tag

#Microsoft 365

37 stories taggedMicrosoft 365.

A digital illustration showing a hacker targeting Microsoft 365 through OAuth
Identity & Access

Kali365 Phishing Kit Turns Microsoft's Own Login Page Against US Firms

A new criminal toolkit tricks staff into approving attacker device codes on genuine Microsoft screens, handing over long-lived access to email and cloud files.

3 min read
Photoreal editorial shot of a dimly lit modern office desk at night, a laptop screen glowing with a generic blurred sign-in form, a smartphone beside it showing
Identity & Access

Greatness Phishing Kit Adds a New Trick to Steal Logins Without Passwords

The rented phishing toolkit now abuses Microsoft's own login flow to walk around multi-factor authentication.

4 min read
Full-frame edge-to-edge photoreal overhead shot of a darkened open-plan office at night, single monitor glowing with a generic email client interface blurred be
Identity & Access

Russian hackers turn hotel Wi-Fi into a trap for Microsoft 365 logins

Microsoft says APT29 sub-group Storm-2945 has been hijacking guest Wi-Fi at hotels and conference centres since May, planting two new malware families to steal corporate accounts.

4 min read
Full-frame edge-to-edge overhead photoreal shot of a generic black Android smartphone face-up on a matte gray desk, screen glowing pale blue with abstract geome
Identity & Access

Device Code Phishing: The Login Trick That Blew Up in 2026

A login flow built for smart TVs is now one of the fastest-growing routes into corporate accounts, and identity teams are struggling to keep up.

4 min read
Full-frame edge-to-edge photoreal news-editorial image of a glowing blue search bar floating above a dark server-room aisle, faint data streams leaking sideways
AI Security

Hidden Prompts in Word Files Can Hijack Microsoft 365 Copilot, Researcher Warns

A proof of concept shows Copilot copying attacker instructions into finished documents, then spreading them to the next draft.

4 min read
A close-up photoreal shot of a laptop screen showing a blurred generic corporate login form, with a faint ghostly overlay of scrambled characters resolving into
Threat Intelligence

Hotel and Conference Wi-Fi Networks Hijacked to Steal Corporate Login Details

Criminals are quietly rewriting the internet directions on public Wi-Fi routers at hotels and conference centres, then catching employees' Microsoft 365 passwords mid-air. Researchers say the campaign has been running since at least June 2026.

3 min read
Full-frame photoreal news-editorial image of a dimly lit security operations centre at night, rows of large curved monitors glowing blue and amber with abstract
Threat Intelligence

Hotel Wi-Fi hijack campaign quietly harvests Microsoft 365 logins from business travellers

A cluster with overlaps to Russia-linked APT28 activity is tampering with DNS on hotel and conference Wi-Fi gateways to funnel guests into fake Microsoft login pages, ReliaQuest reports.

4 min read
Close-up overhead shot of a plain laptop keyboard in a dimly lit office, the screen glowing pale blue, an inbox interface faintly reflected on the desk surface,
AI Security

AegisAI Raises $36 Million to Fight AI-Generated Phishing Emails

A startup built by former Google security engineers says criminals now use artificial intelligence to craft personalised fake emails at scale. Its answer is an AI system that reads those emails back.

3 min read
Full-frame edge-to-edge photoreal overhead shot of a dense server rack aisle in a data center, cold blue LED lighting, dark shadows between cabinets, faint refl
Cloud Security

Microsoft 365 hit by outage knocking out Teams, SharePoint and Excel

Downdetector logged more than 2,400 user reports as Microsoft opened incident MO1437424 and began investigating.

3 min read
An illustration of a cloud with a digital lock being opened, symbolizing a security breach
Cloud Security

Microsoft Exchange Online is Wrongly Locking Away Customer Mailboxes

A memory bug from an infrastructure change has been quarantining legitimate mailboxes since Sunday, blocking email and calendar access with no full-fix timeline yet.

3 min read
Full-frame edge-to-edge overhead photoreal shot of a dim government-style operations desk, dark wood surface with a glowing blue network topology map projected
Threat Intelligence

German Police Shut Down Kratos Phishing Network, But Experts Say the Pause Will Be Brief

Authorities seized more than 200 servers and arrested a developer in Indonesia. Security researchers say the 1,800 customers who used the service are already shopping for a replacement.

3 min read
Full-frame photoreal editorial image of a dimly lit European police evidence room, a plain server rack with cables unplugged and yellow evidence tags dangling f
Identity & Access

Police shut down Kratos, the phishing kit built to hijack Microsoft 365 logins

German and US investigators dismantled the kit's servers, and Indonesian police arrested its alleged creator, ending a service that helped criminals slip past two-factor login checks.

3 min read
Full-frame photoreal news-editorial image of a darkened server room with rows of rack servers, red status lights dimmed, one rack cabinet unplugged with cables
Threat Intelligence

German and US police pull the plug on Kratos, a phishing kit rented to 1,800 crooks

Investigators seized more than 200 servers and arrested the developer in Indonesia, ending a service that ran roughly 15,000 fake Microsoft login campaigns every month.

3 min read
Full-frame 16:9 photoreal editorial shot of a dimly lit server room with one rack door left ajar, faint blue LED glow spilling out onto a concrete floor, cables
Threat Intelligence

HollowGraph Malware Hides Spy Commands Inside Microsoft 365 Calendar Entries

A newly identified piece of malware turns ordinary calendar appointments into a covert messaging system, letting criminals send instructions and steal files without ever touching a suspicious server.

3 min read
Full-frame photoreal news-editorial image of a dimly lit office desk at night, a laptop screen glowing with a blurred calendar grid showing dates far in the fut
Threat Intelligence

HollowGraph Spies Hide Their Orders in Fake Calendar Events Dated 2050

A newly named espionage tool turns Microsoft 365 calendars into a secret mailbox, tucking instructions and stolen files into meetings set decades in the future.

3 min read
© 2026 Threat Vectr