top of page

RUSSIAN HACKERS ARE TARGETING MICROSOFT 365 ACCOUNTS - ARE YOU PROTECTED?

29 Apr 2025

Russian threat actors, including the infamous Cozy Bear, are using highly sophisticated spear-phishing attacks to hijack Microsoft 365 accounts. If they can trick the US State Department and Ukrainian Ministry of Defence, your business could be next.

 

  • How it works: Hackers impersonate trusted contacts and lure victims into entering a Device Code on a fake Microsoft login page, granting them long-term access to accounts.

  • Real-time deception: Attackers use messaging apps like Signal to build trust and coordinate in real-time, ensuring victims enter the code before it expires.

  • High success rate: This method is more effective than traditional phishing, making it a top choice for advanced threat actors.

 

Don’t let your organization become the next target. Protect your data today by:

  1. Training your team: Teach employees to recognize and avoid spear-phishing attempts, especially those involving real-time communication.

  2. Enabling multi-factor authentication (MFA): Add an extra layer of security to your Microsoft 365 accounts.

  3. Monitoring for suspicious activity: Regularly review login attempts and device access to spot potential breaches early.

 

Cybercriminals are getting smarter, but you can stay one step ahead. By equipping your team with the right tools and knowledge, you can protect your business from even the most advanced attacks.

 

Empower your workforce to make smarter security decisions every day. Join 70,000+ organizations worldwide in building a stronger security culture and reducing human risk.

 

 🚀 Book a demo today to safeguard your organization!

bottom of page