Tag: #CyberAwareness
Google Play Store removed apps that were secretly stealing user data, exposing millions of Android devices to security threats. These malicious apps contained KoSpy spyware, linked to North Korean hacking group APT37 (ScarCruft). They remained undetected for over two years, collecting sensitive information such as call logs, messages, and GPS locations. If any of these […]
The Microsoft device code phishing attack is a sophisticated cyber threat that manipulates the OAuth device authorization flow to bypass multi-factor authentication (MFA) and gain unauthorized access to Microsoft 365 accounts. According to recent cybersecurity reports, over 55% of phishing attacks in 2024 have targeted Microsoft 365 users, emphasizing the growing vulnerability of cloud-based authentication […]
Microsoft 365 security threats continue to evolve, with cybercriminals leveraging sophisticated tactics like phishing, credential theft, and malicious HTML attacks to exploit vulnerabilities in businesses of all sizes. The way businesses operate today has transformed dramatically, making Microsoft 365 security a crucial aspect of their cybersecurity strategy. While email remains an essential communication tool, it has […]