Record · corpus.blog/posts/01a0871e-2e5f-725b-a4fc-7d978fdde4b9

Introducing a new phishing technique for compromising Office 365 accounts

aadinternals.com · published 13 October 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aadinternals.com Wayback capture

4blogs citing

First cited: 15 Dec 2022
Most recent: 28 Nov 2024
Rank this month: not ranked
Links from this post: 16
Words captured: 3,122

Cited by

Blog

In the post

Date

blog.christophetd.fr

The New PKCE Authentication in AWS SSO Brings Hope (Mostly) Read at the source ↗

28 Nov 2024

Compass Security

Device Code Phishing – Add Your Own Sign-In Methods on Entra ID Read at the source ↗

30 Jan 2024

Compass Security

Device Code Phishing – Compass Tooling Read at the source ↗

24 Oct 2023

dirkjanm.io

Phishing for Primary Refresh Tokens and Windows Hello keys Read at the source ↗

10 Oct 2023

inversecos.com

How to Detect Malicious OAuth Device Code Phishing Read at the source ↗

15 Dec 2022

Links from this post

Link

Host

https://threatpost.com/microsoft-seizes-domains-office-365-phishing-scam/157261

threatpost.com

https://phishing.org/what-is-phishing

phishing.org

https://www.phishing.org/phishing-techniques

phishing.org

https://threatpost.com/office-365-phishing-attack-leverages-real-time-active-directory-validation/159188/

threatpost.com

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

docs.microsoft.com

https://www.bleepingcomputer.com/news/security/phishing-attack-hijacks-office-365-accounts-using-oauth-apps/

bleepingcomputer.com

https://www.nixu.com/blog/demonstration-illicit-consent-grant-attack-azure-ad-office-365

nixu.com

https://twitter.com/SantasaloJoosua

twitter.com

https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-device-code

docs.microsoft.com

Documentation Read at the source ↗

aadinternals.com

Using Azure Cloud Shell from PowerShell Read at the source ↗

aadinternals.com

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

docs.microsoft.com

https://docs.microsoft.com/en-us/powershell/module/azuread/revoke-azureaduserallrefreshtoken?view=azureadps-2.0

docs.microsoft.com

https://gist.github.com/Mr-Un1k0d3r/afef5a80cb72dfeaa78d14465fb0d333

gist.github.com

https://twitter.com/MrUn1k0d3r

twitter.com

https://graph.windows.net

graph.windows.net