Read on Twitter
📚 Excellent article on #Phishing techniques targeting #O365 and #Azure🎣 Traditional phishing, device-code authentication, illicit consent grant attacks... it is not easy to make it simple on this topic, and it's the case here! riskinsight-wavestone.com/en/2023/03/ill… 
1️⃣ Obviously, the traditional phishing attack is simple to implement in the absence of multi-factor authent 🔐 We know what to do!
2️⃣ More tricky, device-code authent attack: the attacker’s objective is to get the victim to fill in his device code on the Ms devicelogin page🔥
2️⃣ More tricky, device-code authent attack: the attacker’s objective is to get the victim to fill in his device code on the Ms devicelogin page🔥
3️⃣ Conditional access policies can be used to prohibit suspicious connections from devices not under the control of the company👍
4️⃣ The illicit consent grant attack relies on the ability of an attacker to create an app that requires permission to be granted 💣
4️⃣ The illicit consent grant attack relies on the ability of an attacker to create an app that requires permission to be granted 💣
5️⃣ The permissions that can be recovered by the attacker during this type of attack depend on the config of the targeted #AzureAD tenant.
6️⃣ Allow only apps approved by admins 👥, limit permissions which can be granted, regularly review rights, limit access to #SharePoint files📜
6️⃣ Allow only apps approved by admins 👥, limit permissions which can be granted, regularly review rights, limit access to #SharePoint files📜
• • •
Missing some Tweet in this thread? You can try to
force a refresh
