Microsoft takes control of criminal domains

In another article ran through last week’s security news, we have learned that Microsoft has taken over key domains in cyberactors infrustructure that seem to now lure users to unwittingly give up their accounts to the actors after being lured through Phishing to a direct Microsoft page. The technical details are quite complex, and the Security Week article Microsoft Files Lawsuit to Seize Fake Domains Used in COVID-19-Themed BEC Attacks explains it well.

Basically, Microsoft has been tracking this since December 2019 but the actors have changed their tactics after the Corona Virus (covid-19) became the talk of 2020. Please read the article linked here. It is well worth the read.