Tag: oauth hijacking

1 Attack Reports | 0 Vulnerabilities

Attack reports

PHISH ALERT: Press Play for Compromise — Voicemail Phishing Kit Bundles SSO Hijacking, Credential Theft, and RMM Delivery

An advanced voicemail-themed phishing campaign is utilizing HTML attachments to hijack Microsoft 365 sessions through silent OAuth exploitation. Emails arrive spoofing legitimate businesses with fake voicemail notifications containing embedded HTML files. When victims click the play button, the kit…
credential harvesting
microsoft 365
phishing-as-a-service
2026-06-10
oauth hijacking
sso exploitation
voicemail phishing
Published: June 10, 2026
Downloadable IOCs: 19
Click here to see more Attack Reports