EvilToken’s Microsoft 365 Phishing Toolkit
Overview A newly uncovered phishing‑as‑a‑service (PhaaS) platform called ARToken has revealed the inner workings of the EvilTokens phishing ecosystem — a sophisticated toolkit designed to compromise […]
OFFICE 365
How Attackers Are Turning Legitimate Microsoft 365 Accounts Into Phishing Weapons
Overview Phishing campaigns continue to evolve, and the latest version of the CodeStorm phishing kit demonstrates just how far attackers are willing to go to […]
The Rise of Microsoft 365 Group Phishing
Overview Cybercriminals are constantly looking for new ways to bypass traditional email security controls, and a recently identified campaign shows just how effective trusted platforms […]
Beware of the Fake “Microsoft” Verification Code Scam
Overview A new wave of device code phishing attacks is targeting Microsoft 365 users across the US, Canada, and Europe, compromising over 340 organizations. These emails […]
ConsentFix v3 — Automated OAuth Abuse Against Azure
Overview A new attack technique, ConsentFix v3, has emerged on hacker forums as an automated evolution of earlier OAuth phishing methods. Building on ClickFix and […]
Entra Agent ID Administrator Role Exploited — Lessons in Privilege Boundaries
In April 2026, Microsoft patched a critical scope overreach vulnerability in the Entra Agent Identity Platform. The flaw centered on the newly introduced Agent ID […]
Pastebin-Hosted PowerShell Script Targets Telegram Sessions
Overview Researchers have uncovered a malicious PowerShell script hosted on Pastebin that masquerades as a Windows Telemetry Update. The script is designed to silently steal […]
Azure Fortigate Deployment
I have seen a number of articles relating to the deployment of Azure Fortigate firewalls but to me was never clear, too little info, too […]
AAD Connect – User Hard Match
ISSUE: The user “User 1” with UPN “user@domain.com” was showing as In Cloud on the Office 365 portal but there was another duplicate user “User […]
Azure ADConnect Setup
I will go through the setup of AADConnect. Just in case if you have not seen my article on IDFix. Just click on the name […]