Archives

oauth

Threat Intelligence

Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks

December 4, 2025

Matthew Meltzer, Steven Adair, and Tom Lancaster

In early 2025, Volexity published two blog posts detailing a new trend among Russian threat actors targeting organizations through the abuse of Microsoft 365 OAuth and Device Code authentication workflows to […]

Threat Intelligence

Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

April 22, 2025

Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, and Tom Lancaster

Since early March 2025, Volexity has observed multiple suspected Russian threat actors conducting highly targeted social engineering operations aimed at gaining access to the Microsoft 365 (M365) accounts of targeted […]

1 / 1