Content by Microsoft Threat Intelligence and Microsoft Defender Security Research Team (2)

Microsoft Threat Intelligence and Microsoft Defender Security Research Team details how malicious Axios npm releases (1.14.1 and 0.30.4) pulled second-stage RAT payloads from Sapphire Sleet infrastructure, and provides concrete mitigation steps plus Defender/Sentinel hunting guidance to detect and contain impacted developer machines and CI/CD systems.

The Microsoft Threat Intelligence and Defender Security Research Team provide a comprehensive overview of Tycoon2FA, a sophisticated phishing-as-a-service platform. This resource offers technical breakdowns, impact analysis, and Microsoft-centric defense recommendations for security professionals.