New Account Takeover Campaign Leverages Pentesting Tool to Attack Entra ID User Accounts

A sophisticated account takeover campaign has emerged, exploiting a legitimate penetration testing framework to compromise Microsoft Entra ID environments across hundreds of organizations worldwide. The malicious activity, which began intensifying in December 2024, demonstrates how cybercriminals are increasingly weaponizing security tools originally designed for defensive purposes. The campaign leverages TeamFiltration, a publicly available pentesting framework […]

The post New Account Takeover Campaign Leverages Pentesting Tool to Attack Entra ID User Accounts appeared first on Cyber Security News.

This article has been indexed from Cyber Security News

Read the original article: