Story perspectives

Russian Hackers Target Microsoft 365 with Phishing Attacks

2/15/2025

50 6

Summary

Story summary

Russian cybercriminals, known as Storm-2372, are launching sophisticated phishing attacks that exploit Microsoft Device Code Authentication to infiltrate Microsoft 365 accounts. By masquerading as officials and sending deceptive meeting invites, they manipulate users into revealing authentication codes. This alarming tactic has been particularly effective against government and critical infrastructure sectors since August 2024, raising serious security concerns.

1 of 1

Story summary

Russian cybercriminals, known as Storm-2372, are launching sophisticated phishing attacks that exploit Microsoft Device Code Authentication to infiltrate Microsoft 365 accounts. By masquerading as officials and sending deceptive meeting invites, they manipulate users into revealing authentication codes. This alarming tactic has been particularly effective against government and critical infrastructure sectors since August 2024, raising serious security concerns.