Account Validation Email Scam

After inspecting this "Account Validation" email, we determined that it is spam. This message claims the recipient risks having their email account permanently disabled unless it is verified. The purpose of this mail is to deceive recipients into disclosing their log-in credentials to a phishing website. The scam email with the subject "Account Re-validate(final warning)!" (may vary) states that the recipient's account will be blocke...

Microsoft 365 Users Beware The Mamba

Microsoft 365 users should be aware of a new threat actor offering their services as a phishing-as-a-service platform to conduct Adversary-in-the-Middle (AiTM) attacks for a monthly fee. Called Mamba2FA, not to be confused with Mamba ransomware, the malware targets Microsoft 365 users with well-crafted login pages. However, the real danger to Microsoft 365 users is the ability to conduct AiTM attacks to capture the victim's authentication tok...