Microsoft Teams users duped into passing on MFA codes
Tags
cmtmf-attack-pattern: Masquerading
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Chat Messages - T1552.008 Conditional Access Policies - T1556.009 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Python - T1059.006 Tool - T1588.002 Masquerading - T1036 Masquerading
Show in Graph
Common Information
Type Value
UUID ac43a3b9-0b44-43ca-ad63-d3b5883fe52b
Fingerprint a4d02a103a8bddc4
Analysis status DONE
Considered CTI value 1
Text language
Published Aug. 3, 2023, 8:36 a.m.
Added to db Aug. 3, 2023, 4:01 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Microsoft Teams users duped into passing on MFA codes
Title Microsoft Teams users duped into passing on MFA codes
Detected Hints/Tags/Attributes 36/4/4
Source URLs
Redirection Url
Details Source https://www.scmagazine.com/news/microsoft-teams-mfa-codes
URL Provider
Details Provider Source level domain
Details scmagazine.com www.scmagazine.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 36 
onmicrosoft.com
Details Domain 3 
teamsprotection.onmicrosoft.com
Details Mandiant Uncategorized Groups 97 
UNC2452
Details Threat Actor Identifier - APT 665 
APT29