Luna Moth extortion group targets law firms again with social engineering to steal Microsoft access tokens
Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗
The Luna Moth extortion group has resumed targeting law firms that previously refused to pay ransom demands. This second wave employs social engineering tactics designed to steal Microsoft access tokens, thereby facilitating unauthorized access to sensitive systems. The campaign highlights persistent threats against legal sector organizations and the use of advanced credential theft to bypass security controls. Law firms are urged to strengthen access token protection and enhance staff training against social engineering attacks to mitigate these risks.
Linha do tempo
-
darkreading.com ↗ · pub. 12/11/2026 17:09 · coletado 12/11 18:00 primeiro registro só resumo do feed
Luna Moth extortion group targets law firms again with social engineering to steal Microsoft access tokens
ler a análise desta fonte ocultar
The Luna Moth extortion group has resumed targeting law firms that previously refused to pay ransom demands. This second wave employs social engineering tactics designed to steal Microsoft access tokens, thereby facilitating unauthorized access to sensitive systems. The campaign highlights persistent threats against legal sector organizations and the use of advanced credential theft to bypass security controls. Law firms are urged to strengthen access token protection and enhance staff training against social engineering attacks to mitigate these risks.