Phishing

Microsoft reported that it was able to avert over 25.6 billion brute-force authentication attacks in Azure Active Directory, as well as 35.7 billion phishing emails using Microsoft Defender for Office 365.

The report says 89% of organizations experienced a phishing attack in 2021 and 34% sustained a credential stuffing attack.

Proofpoint researchers say man-in-the-middle attacks will continue in the months ahead, bypassing multi-factor authentication.

The FBI warned that threat actors have been launching phishing campaigns using fraudulent job postings on recruitment websites in an effort to exfiltrate personal data and cash.

Businesses have to focus more on the human equation, versus viewing cybersecurity as a technology issue they can solve by spending more.

Proofpoint researchers say after the attackers take over accounts, organizations face data leakage, continued phishing, lateral movement, brand abuse and malware threats.

The Microsoft researchers found that the second stage of the campaign was successful against victims that did not implement multi-factor authentication (MFA).

Armorblox researchers say the email attack lulls users into clicking a malicious “Start Meeting” tab on Zoom, something they do every day.