In this blog post, we share information on DEV-1101, the tool they offer, and details on related AiTM campaigns. Microsoft 365 Defender detects suspicious activities related to AiTM phishing attacks and follow-on activities, such as session cookie theft and attempts to use the stolen cookies to sign in. Actors using this kit have varying motivations and targeting and might target any industry or sector. These attributes make the kit attractive to many different actors who have continually put it to use since it became available in May 2022. The threat actor group began offering their AiTM phishing kit in 2022, and since then has made several enhancements to their kit, such as the capability to manage campaigns from mobile devices, as well as evasion features like CAPTCHA pages.

The availability of such phishing kits for purchase by attackers is part of the industrialization of the cybercriminal economy and lowers the barrier of entry for cybercrime.ĭEV-1101 offers an open-source kit that automates setting up and launching phishing activity and provides support services to attackers. DEV-1101 is an actor tracked by Microsoft responsible for the development, support, and advertising of several AiTM phishing kits, which other cybercriminals can buy or rent. AiTM phishing is capable of circumventing multifactor authentication (MFA) through reverse-proxy functionality.

Microsoft Purview Data Lifecycle ManagementĪdversary-in-the-middle (AiTM) phishing kits are part of an increasing trend that is observed supplanting many other less advanced forms of phishing.

Microsoft Purview Information Protection.

Information protection Information protection.

Microsoft Priva Subject Rights Requests.

Microsoft Purview Communication Compliance.

Microsoft Purview Insider Risk Management.

Risk management & privacy Risk management & privacy.

Endpoint security & management Endpoint security & management.

Microsoft Defender External Attack Surface Management.

Microsoft Defender Cloud Security Posture Mgmt.

Microsoft Defender Vulnerability Management.

Azure Active Directory part of Microsoft Entra.

License key flashback pro 5