Scworld

TOAD Phishing Campaign Targets Microsoft Entra Users with Fake Invoices

First seen 18 Nov 2025, 03:12 UTC • Gbhackers

•89% similarity •24.3

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A new phishing campaign, identified as TOAD, has been targeting Microsoft Entra guest invitees by sending fake invoices. The campaign was uncovered by threat researcher Matt Taggart and associates over the weekend, exploiting vulnerabilities in the Microsoft platform.

ThreatCluster AI

Attack Flow

9 entities, 7 inferred relationships (STIX 2.1).

Technique (2)

Phishing
T1566 - Phishing

Campaign (5)

Telephone-Oriented Attack Delivery
TOAD Attack
TOAD Attacks
TOAD Phishing Attacks
TOAD Phishing Campaign

Organization (1)

Microsoft

Affected Platform (1)

Microsoft Entra

Relationships

Phishing targets Microsoft Entra
T1566 - Phishing targets Microsoft Entra
Telephone-Oriented Attack Delivery related to TOAD Attack
Telephone-Oriented Attack Delivery related to TOAD Attacks
Telephone-Oriented Attack Delivery related to TOAD Phishing Attacks
Telephone-Oriented Attack Delivery related to TOAD Phishing Campaign
Telephone-Oriented Attack Delivery related to Microsoft

Community

Browse all →

TOAD Phishing Campaign Targets Microsoft Entra Users with Fake Invoices

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading