Goksel Atakan
@gokselatakanIstanbul, Turkiye GoXDR.fyiTrusted contributorCompletionist
0 followers35 downloads1,209 copies35 likes2,469 views
12 intel reports
Filters
Last updated
All Time
Adversaries
1
1
1
1
1
CVEs
2
2
1
1
1
Malware / Tools
1
1
1
1
1
MITRE Techniques
4
3
3
3
3
Publisher
2
1
1
1
1
M365 Token Spray and Replay Campaign
An unattributed threat actor used AiTM phishing and device code flows to steal M365 session tokens, replaying them to register rogue devices and wipe MFA methods across 79 organizations.
Helix Data Extortion via Vishing and SharePoint Exfiltration
Helix extortion group uses vishing and device code phishing to compromise identities and automate bulk data exfiltration from SharePoint environments.
Page 2 of 2