Hackers Exploit Microsoft Entra Guest Invitations For Sophisticated TOAD Attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

TOAD Phishing Campaign Targets Microsoft Entra Users with Fake Invoices A new phishing campaign, identified as TOAD, has been targeting Microsoft Entra guest invitees by sending fake invoices. The campaign was uncovered by threat researcher Matt Taggart and associates over the weekend, exploiting vulnerabilities in the Microsoft platform. 4 sources 24