ShadyHacks is a threat campaign tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed November 26, 2025; most recent activity November 26, 2025.
ShadyHacks is described as a current threat campaign in recent cybersecurity reporting. The article centers on insights from Kyle Hanslovan, signaling that the campaign has attracted the attention of a well-known researcher and is considered noteworthy for defenders. The piece highlights the campaign's relevance for monitoring evolving threat activity.
Cybercriminals are bypassing security measures in Microsoft 365 by using stolen credentials and exploiting legitimate features of the platform. This method allows attackers to gain full access without triggering alarms,…