Russian Hackers Use Microsoft Device Code Phishing In Targeted Attacks

Russian Hackers Use Microsoft Device Code Phishing In Targeted Attacks

Russian hackers linked to the threat actor Storm-2372 have been attacking government and private entities since August 2024. These hackers specialise in compromising Microsoft 365 accounts using a technique known as device code phishing, which they have discovered to be more effective than typical spear-phishing efforts. Hackers pose as representatives of government agencies, such as the US Department of State, and prominent scientific institute…