Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
Threat actors Storm-3121 and Storm-3032 utilize passkey-themed social engineering and AiTM phishing to compromise Microsoft cloud identities for automated data exfiltration via Microsoft Graph.
Threat actors are using personal Gmail accounts and short.gy URL shorteners to deliver bilingual legal-threat lures for credential harvesting.
Attackers are abusing Google Forms' editor invite feature to bypass email security and harvest sensitive information using name-matching social engineering pretexts.
