Microsoft Entra Invitations Hijacked in Surge of TOAD Phishing Attacks

Gbhackers • November 17, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

TOAD Phishing Campaign Targets Microsoft Entra Users with Fake Invoices A new phishing campaign, identified as TOAD, has been targeting Microsoft Entra guest invitees by sending fake invoices. The campaign was uncovered by threat researcher Matt Taggart and associates over the weekend, exploiting vulnerabilities in the Microsoft platform. 4 sources 24

Extracted Entities

Microsoft Entra Invitations Hijacked in Surge of TOAD Phishing Attacks

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)