Tessera
Folgen

Microsoft Threat Intelligence

@threatintel.microsoft.com

We are Microsoft's global network of security experts. Follow for security research and threat intelligence. https://aka.ms/threatintelblog

588 Posts2298 Follower57 Folgt
Microsoft Threat Intelligence@threatintel.microsoft.com · 1h ago

Microsoft observed a macOS ClickFix campaign that evolved from openly serving infostealer lures to hiding them behind a server-side fingerprinting gate, exposing the content primarily to qualifying macOS visitors. msft.it/6049aEBu1

From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide | Microsoft Security Blog

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while giving defenders new hunting opportunities.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 18h ago

Microsoft has published an in-depth technical analysis of the supply chain attack known as "ChainDrop" affecting hundreds of packages and delivering a self-propagating credential-stealing worm. Read our blog for mitigation, detection, and hunting guidance: msft.it/63322aDU0s

ChainDrop supply chain compromise: Anatomy of a self-propagating worm | Microsoft Security Blog

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by republishing malicious updates. This analysis details the attack chain, affected environments, and practical guidance for detection, hunting, and remediation.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 21h ago

Attackers are increasingly establishing footholds directly on endpoints, using legitimate tools and locally executed payloads to prolong access and evade traditional containment measures. msft.it/63325aDi7h

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET  | Microsoft Security Blog

Microsoft Defender automatically isolated a compromised QNET endpoint in 129 seconds, stopping a multi-stage attack before the payload could persist or spread.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 5d ago

Microsoft Threat Intelligence has observed Storm-2945, a sub-cluster of Midnight Blizzard, compromising hospitality-related networks worldwide to steal credentials, access cloud environments, and deliver malware to travelers. msft.it/63328aBnhE

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft | Microsoft Security Blog

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order to deliver malware to travelers and steal credentials in an operation we call CaptiveCrunch.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2w ago

The continuing effects of Microsoft's disruption of the Tycoon2FA phishing platform contributed to sustained declines in several major phishing techniques during Q2 of 2026 (April-June), including QR code phishing and CAPTCHA-gated phishing. msft.it/63328vA9si

Email threat landscape: Q2 2026 trends and insights | Microsoft Security Blog

In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contributed to sustained declines in several major phishing techniques, while threat actors expanded into Teams-based social engineering and employed increasingly automated and multi-stage attack chains.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 3w ago

Microsoft’s investigation into increased ACR Stealer activity surfaced two distinct intrusion paths that both begin with ClickFix, diverge in execution, but lead to the same outcome: the exfiltration of browser credentials, session tokens, and other sensitive data. msft.it/63329v2sk3

ACR Stealer: Two observed intrusion chains amid increased threat activity | Microsoft Security Blog

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal browser credentials, authentication tokens, and sensitive documents from enterprise environments.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 3w ago

Microsoft has published an in-depth analysis of the AsyncAPI npm supply chain compromise, from CI/CD compromise to a multi-stage payload that executed at import time, bypassing common npm script-based defenses. Get technical info, detection & hunting guidance. msft.it/63323v2Gzc

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery | Microsoft Security Blog

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This analysis breaks down the attack chain, payload delivery, and recommended defenses.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 3w ago

Microsoft identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications. msft.it/63327v0v1X

Defending SaaS-based applications against ShinyHunters OAuth abuse | Microsoft Security Blog

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 4w ago

While investigating wiping attacks, Microsoft Threat Intelligence uncovered GigaWiper, a destructive backdoor that combines multiple wiping and ransomware-like capabilities into one implant, an approach that gives attackers more flexibility while reducing operational footprint. msft.it/6014vIRAe

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware | Microsoft Security Blog

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platform. This blog analyzes how the malware incorporates code from several previously separate malware families and provides guidance to help defenders detect and defend against similar threats.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · last mo.

As enterprise deployments mature, some enterprise AI agents are shifting from reading content to taking action, creating opportunities for threat actors to misuse trust relationships within agent workflows. msft.it/63328vsS4n

Securing AI agents: When AI tools move from reading to acting | Microsoft Security Blog

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool descriptions to trigger unauthorized actions, and how to detect, contain, and prevent it.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · last mo.

A malicious Chromium-based extension spoofed the AI-powered answer engine Perplexity AI to intercept browser search traffic and collect user input before redirecting users to expected search providers. msft.it/63321vsBdl

Chromium extension uses AI‑related branding to redirect browser search | Microsoft Security Blog

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · last mo.

A single intrusion exposed parallel activity from two unrelated threat actors operating at the same time, blending tactics, obscuring signals, and enabling sustained access while masking the full scope of the compromise. msft.it/63326vqXMs

One intrusion, two cyberattackers: Uncovering parallel threat activity | Microsoft Security Blog

Microsoft DART uncovers dual threat actors in a single intrusion, revealing how blended tactics conceal attacks and complicate detection. Learn more.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · last mo.

Microsoft Threat Intelligence has identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe and Asia. The campaign uses photo-themed ZIP archives and fake image shortcut files to deliver a persistent Node.js implant and evade detection. msft.it/6010vUC3w

Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access | Microsoft Security Blog

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe and Asia. The campaign uses photo-themed ZIP archives and fake image shortcut files to deliver a persistent Node.js implant and evade detection.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · last mo.

Microsoft has observed a supply chain attack targeting the Leo Platform/RStreams npm ecosystem. On June 24, 2026, at 23:04:55 UTC, a compromised maintainer account ("czirker") to publish malicious versions of 20+ npm packages in a coordinated, fully automated operation completed in under 3 seconds.

Graphic showing chains
Microsoft Threat Intelligence@threatintel.microsoft.com · last mo.

Infostealers like StealC and malware delivery services like Amadey play a central role in intrusions, turning compromises of consumer devices into enterprise risk. These threats harvest passwords, cookies, & session tokens that could allow attackers to bypass MFA. msft.it/63320voCdq

StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them | Microsoft Security Blog

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that formed the backbone of the StealC and Amadey infrastructure. This blog is a technical breakdown of StealC and Amadey.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

Microsoft attributes the Mastra npm supply chain compromise to Sapphire Sleet, a North Korean actor that primarily targets the financial sector. Microsoft has observed use of known Sapphire Sleet infrastructure, malware, and tactics following compromise. msft.it/63320vmpSC

From package to postinstall payload: Inside the Mastra npm supply chain compromise | Microsoft Security Blog

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

Research into AutoGen Studio identified an attack chain that could allow attacker-controlled web content rendered by a browsing agent to trigger arbitrary process execution on the host. msft.it/63328vl4u4

AutoJack: How a single page can RCE the host running your AI agent  | Microsoft Security Blog

AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authentication, and unsafe parameter handling, attackers can trigger arbitrary process execution through AutoGen Studio’s MCP WebSocket. The research highlights a broader pattern - when agents can browse untrusted content and access local services, traditional boundaries like localhost are no longer secure.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

Microsoft has published an in-depth breakdown of the Mastra npm supply chain compromise, including a detailed analysis of the second-stage payload. Read the blog to get indicators of compromise, along with recommendations for mitigation, detection, & threat hunting. msft.it/63328vlpLe

From package to postinstall payload: Inside the Mastra npm supply chain compromise | Microsoft Security Blog

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

Since February 2026, Microsoft Defender Experts have tracked a cryptocurrency clipper campaign that combines clipboard theft, wallet address replacement, worm-like functionality, and Tor-based communications, enabling both financial gain and continued access to compromised devices. msft.it/6011vlu15

Crypto Clipper uses Tor and worm-like propagation for persistence and control | Microsoft Security Blog

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, Tor-based communications, and worm-like propagation. Beyond stealing cryptocurrency transactions, the malware establishes persistent access and enables follow-on activity through a lightweight backdoor capability.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

In this episode of the Microsoft Threat Intelligence Podcast, Sherrod DeGrippo joins Aurora Johnson of SpyCloud and Amitai Cohen of Wiz to discuss their Sleuthcon talks on two rapidly evolving cyberthreats: software supply chain threats and smishing ecosystems. msft.it/63328vYf56

Hot Cybercrime Summer:  Smishing, Supply Chains, and Sleuthcon

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠⁠Sherrod DeGrippo⁠ sits down with Aurora Johnson of SpyCloud and Amitai Cohen of Wiz ahead of SleuthCon to explore two rapidly changing corners of the cybercrime landscape. Aurora breaks down the highly organized Chinese-language smishing ecosystem, revealing how phishing operations, fraud networks, and cash-out schemes work together like a mature business. Amitai examines the growing threat to software supply chains, explaining how groups like Team PCP are exploiting CI/CD pipelines, open-source dependencies, and AI-assisted malware development. Together, they discuss the industrialization of cybercrime, the role of automation and AI, and why defenders must rethink how they secure today's interconnected digital ecosystem.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

Microsoft has identified a supply chain attack on the Mastra-AI npm ecosystem, with 80+ packages compromised via npm account takeover. The attacker introduced a phantom dependency into the compromised packages. The malicious dependency was published by a single anonymous maintainer <24 hours ago.

Image of supply chain attack
Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

Microsoft Threat Intelligence continues to observe Sapphire Sleet refining their macOS intrusion tactics, following the same previously documented core attack chain, but with a new Teams‑themed lure. msft.it/63322vYR9o

Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise | Microsoft Security Blog

The Microsoft Defender Security Research Team uncovered a sophisticated macOS intrusion campaign attributed to the North Korean threat actor Sapphire Sleet that abuses user driven execution and social engineering to bypass macOS security protections and steal credentials, cryptocurrency assets, and sensitive data.

msft.it

Microsoft Threat Intelligence@threatintel.microsoft.com · 2mo ago

Threat actors are increasingly exploiting the hype around AI as social engineering lure in phishing, malvertising, and search-driven attacks. By impersonating trusted tools and services, they capitalize on user curiosity and urgency to improve success rates. msft.it/6019v5k6N

AI brands as bait: How threat actors are using the AI hype in social engineering | Microsoft Security Blog

As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure.

msft.it