Social Engineering
The latest Social Engineering coverage — news, analysis, and updates from the WindowsNews.AI desk.
Messaging Apps as Cyberattack Vectors: Protecting Microsoft 365 Credentials
In an era where remote work and digital communication dominate the corporate landscape, hackers have found a new gateway to infiltrate systems and steal sensitive information: messaging apps....
Russian Hackers Exploit OAuth 2.0 to Compromise Microsoft 365 Accounts in 2025
Introduction In early 2025, cybersecurity researchers uncovered a series of sophisticated attacks orchestrated by Russian-linked threat actors targeting Microsoft 365 accounts. These adversaries...
Exploiting Trust: How Russian Hackers Hijacked Microsoft 365 Accounts via OAuth 2.0 in 2023
Introduction In 2023, cybersecurity researchers uncovered a series of sophisticated attacks orchestrated by Russian state-sponsored hackers targeting Microsoft 365 accounts. These adversaries...
Safeguarding Remote Support: Preventing Quick Assist Scams in 2023
Introduction In the evolving landscape of cyber threats, remote support tools like Microsoft's Quick Assist have become targets for exploitation. Cybercriminals are increasingly misusing these tools...
Russian Cyber-Espionage Targets Ukrainian NGOs with OAuth Attacks on Microsoft 365
In the ever-evolving landscape of cyber warfare, a disturbing trend has emerged targeting Ukrainian non-governmental organizations (NGOs) through sophisticated OAuth attacks as part of Russian...
Russian State Hackers Weaponize Microsoft 365 OAuth Tokens in 2023 Campaigns
Introduction In 2023, cybersecurity researchers identified a series of sophisticated cyber attacks orchestrated by Russian state-sponsored actors targeting Microsoft 365 environments. These...
Russian Hackers Exploit OAuth to Target Ukraine NGOs via Microsoft 365
In a chilling reminder of the persistent dangers lurking in the digital realm, Russian threat actors have been reported to exploit OAuth vulnerabilities to compromise Microsoft 365 accounts,...
OAuth Phishing in Microsoft 365: A Growing Cybersecurity Threat for Windows Users
In the ever-evolving landscape of cybersecurity, a particularly insidious threat has emerged, targeting the trust users place in familiar platforms like Microsoft 365. Cybercriminals are increasingly...
Russian Hackers Target Microsoft 365: OAuth Exploits and Cybersecurity Threats
In the ever-evolving landscape of cybersecurity, a chilling new threat has emerged targeting Microsoft 365 users worldwide. Russian hackers, often linked to state-sponsored groups, have refined their...
Securing Microsoft 365: Combatting Social Engineering and OAuth Threats in 2023
In an era where digital transformation has become the backbone of business operations, Microsoft 365 stands as a cornerstone for millions of organizations worldwide, powering productivity through...
AI-Driven Scams Targeting Windows Users via Quick Assist: How to Stay Safe
In an era where technology is both a lifeline and a potential trap, Windows users are increasingly finding themselves targeted by sophisticated AI-driven scams that exploit trust and familiarity. One...
Understanding Google's OAuth and Google Sites Phishing Attacks: A Comprehensive Analysis
In recent developments, a sophisticated phishing campaign has emerged, exploiting Google's OAuth protocol and Google Sites to deceive users into revealing their credentials. This attack underscores...