Content by Microsoft Defender Experts and Microsoft Defender Security Research Team (3)

Microsoft Defender Experts and Microsoft Defender Security Research Team break down a cryptojacking campaign that uses SEO poisoning (and AI chatbot referrals) to deliver trojanized “utility” downloads, then abuses ScreenConnect for persistent access and hides mining activity via process hollowing into Microsoft-signed .NET Framework binaries.

Microsoft Defender Experts and the Microsoft Defender Security Research Team expose the Contagious Interview campaign, detailing how fake technical interviews target developers with malware. Their research highlights attack methods, malware payloads, and practical protection strategies.

Microsoft Defender Experts and the Security Research Team provide an in-depth report on a developer-targeted campaign using malicious Next.js repositories that exploit common coding workflows. The analysis details how attackers achieve remote code execution and persistent C2, with actionable security guidance.