Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Microsoft Google Huntress Apple Inc. GitHub Amazon Web Services Amazon Meta

• Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool

  Quarkslab

  T1525 89% T1528 55% T1098 39%
  2026-04-29
• Oluomo: Microsoft OAuth AiTM Phishing Using a Naturalization-Form Lure

  Censys

  T1566.002 97% T1528 91% T1525 88%
  2026-04-22
• LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan

  ESET WeLiveSecurity

  T1053.005 99% T1056.001 99% T1055.001 99%
  2025-12-18
• Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users

  Datadog Security Labs

  T1539 99% T1566.002 98% T1111 70%
  2025-12-10
• Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks

  Volexity

  T1566.002 100% T1078.004 48% T1586.002 31%
  2025-12-04
• Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

  Volexity

  T1566.002 100% T1528 90% T1525 80%
  2025-04-22
• Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

  Volexity

  T1566.002 100% T1078.004 95% T1111 80%
  2025-02-13
• State-backed attackers and commercial surveillance vendors repeatedly use the same exploits

  Google Threat Analysis Group

  T1189 98% T1539 93% T1555.003 72%
  2024-08-29
• Smuggler’s Gambit | Huntress

  Huntress

  T1583.001 96% T1566.002 91% T1557 83%
  2024-05-23
• Exploiting MFA Inconsistencies on Microsoft Services

  Black Hills InfoSec

  T1556.006 94% T1098.002 65% T1078.004 48%
  2020-09-29