• bunee
• August 29, 2023
• No Comments

Microsoft Rings Alarm Bells on Cybercrimes: Rise in ‘Adversary-in-the-Middle’ Phishing Techniques and Phishing-as-a-Service Models

Here are the primary talking points:

• Microsoft alerting about the growth in AiTM (adversary-in-the-middle) phishing methods, driven by the increasingly prevalent phishing-as-a-service (PhaaS) cybercrime business model.
• The technology leader has observed an upswing in PhaaS platforms capable of AiTM, as well as the augmentation of existing phishing services, such as PerSwaysion, with AiTM abilities.

Surge in AiTM-Enabled PhaaS Platforms

Microsoft’s red flag has been raised in light of a disturbing trend: the growth of phishing-as-a-service platforms and services boasting adversary-in-the-middle capabilities. To put this in layman’s terms, it’s like if Superman started selling his powers to the highest bidder – pretty alarming, right?

These platforms are banking on the anglerfish’s approach, luring in unsuspecting ‘phishes’ into their elaborate trap – and with businesses increasingly going digital due to the pandemic, let’s just say they have quite the aquarium of potential victims to choose from.

Existing Phishing Services Adding AiTM Capabilities

It’s not only newcomers to the cybercrime market making worrying advances. Existing phishing service providers, like PerSwaysion, are amplifying their capabilities with AiTM tech. It’s as if the villain of our story just got their hands on the superhero’s utility belt.

The evolution of the PhaaS ecosystem now equips these bad guys with a wider range of tools, making their schemes more diverse and, unfortunately, more successful.

Summing Up

The rise in AiTM phishing techniques and PhaaS cybercrime models is the latest alert from Microsoft, signifying a worrying trend in the world of cybercrime. With an influx of AiTM-enabled PhaaS platforms, enhanced capabilities for existing phishing services, and a spike in victims due to the digital boom caused by the pandemic, it’s hard not to picture the cybercrime world as a villain convention lately. Best keep those antivirus shields up and practice safe browsing, folks!

P.S – Remember: If you are sent an email with the subject line “Knock Knock.” don’t open it. It’s a Jehovah’s witness working from home.

Original Article: https://thehackernews.com/2023/08/phishing-as-service-gets-smarter.html