Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise Microsoft Defender Research observed a large-scale credential theft campaign that exemplifies this trend, using code of conduct-themed lures, a multi-step attack chain, and legitimate email services to distribute fully authenticated messages from attacker-controlled domains. The post Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromis…

https://www.microsoft.com/en-us/security/blog/2026/05/04/breaking-the-code-multi-stage-code-of-conduct-phishing-campaign-leads-to-aitm-token-compromise

sha256:3c9a37c2ad792292ebeaf489b11d1c62e208a9b5174a0c9e51e8e74dfef39afc

• cve0
• md50
• url0
• ipv40
• ipv60
• sha10
• domain10
• sha2563
• malware_token0
• attack_pattern0
• threat_actor_token0