Amazon researchers disrupted a watering hole campaign by Russian-linked cyberespionage group APT29 designed to use compromised websites to trick users into giving the threat actors access to their Microsoft accounts and data via the tech giant's device code authentication flow.

The post Russian-Linked ATP29 Makes Another Run at Microsoft Credentials appeared first on Security Boulevard.

Jeffrey Burt

Source: Security Boulevard
Source Link: https://securityboulevard.com/2025/08/russian-linked-atp29-makes-another-run-at-microsoft-credentials/?utm_source=rss&utm_medium=rss&utm_campaign=russian-linked-atp29-makes-another-run-at-microsoft-credentials