Content by Microsoft Defender Security Research Team and Microsoft Threat Intelligence (2)

Microsoft Defender Security Research Team and Microsoft Threat Intelligence break down a large-scale “code of conduct” themed phishing campaign that used an adversary-in-the-middle (AiTM) flow to steal authentication tokens, and they provide concrete mitigations and Microsoft Defender detections to help security teams hunt and respond.

The Microsoft Defender Security Research Team and Microsoft Threat Intelligence describe how the Jasper Sleet threat actor abuses remote hiring workflows (using AI-assisted deception) and share practical Defender for Cloud Apps and Defender XDR hunting/detection guidance focused on Workday recruiting and onboarding telemetry.