A sophisticated and widespread business email compromise (BEC) campaign has recently come to light, revealing a coordinated effort to infiltrate Microsoft 365 environments on a global scale. Cybersecurity researchers at Huntress have identified an operation that leveraged a combination of advanced social engineering, adversary-in-the-middle (AiTM) techniques, and automated session-token theft to launch hundreds of thousands […]
In a significant blow to the global cybercrime economy, Microsoft has announced the successful disruption of a sprawling phishing-as-a-service (PhaaS) infrastructure that has plagued organizations worldwide since the beginning of 2026. This coordinated intervention, carried out in partnership with international law enforcement agencies—most notably the Japanese police—marks a major milestone in the ongoing battle against […]