Microsoft Warn of Multi-Stage phishing attacks leveraging Azure ADs

The modern multi-phase phishing cyber attacks can be more harmful and damaging than the older, simpler phishing attacks.

The modern multi-phase phishing cyber attacks can be more harmful and damaging than the older, simpler phishing attacks.
 
One of the latest incidents targeted firms in different countries, including Australia, using the Azure AD account to launch a huge phishing attack in multiple stages.
 
This attack was discovered by the Microsoft threat analysts, who reported that the main cause of the generation of this threat was the absence of multi-factor authentication (MFA).
 
So what can firms do to protect against such multi-phase phishing attacks is:

  • Using zero-trust policies for all networks.
  • Activating MFA for all accounts.
  • Close monitoring of device registration.

#contactustoday to help protect your business against #cyber cyber criminals and attacks.

author avatar
ibrahims

ibrahims

Share this post

Other Insights

Vulnerability Assessment vs Penetration Testing What's the Difference

Vulnerability Assessment vs Penetration Testing: What’s the Difference?

Vulnerability assessments identify potential weaknesses, while penetration testing validates what an attacker could actually exploit. Learn how they differ and why organisations often benefit from both.
The Essential Eight Explained: A Guide for Australian Businesses

The Essential Eight Explained

The Essential Eight provides Australian organisations with eight practical cyber security strategies to reduce risk. Learn what each strategy covers, how maturity levels work and how to start improving your security posture.

Stay Informed with Our Security Newsletter

Get the latest threat intelligence, security insights, and industry updates delivered directly to your inbox.

Scroll to Top