Cybercriminals Use Microsoft Entra Invitations to Deliver TOAD Attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cybercriminals Exploit Microsoft Entra Invitations for TOAD Attacks Cybercriminals are conducting a phishing campaign that utilizes Microsoft Entra tenant invitation emails to execute Telephone-Oriented Attack Delivery (TOAD) attacks. This method targets users by misleading them into providing sensitive information. Organizations using Microsoft Entra are particularly vulnerable to this type of attack. 2 sources 24