Microsoft Security Experts, Author at Microsoft Security Blog

A group of people standing on a floor of a building lobby discussing

Credential theft
May 21
15 min read

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

Over the past year, Microsoft Threat Intelligence observed the persistent growth and operational sophistication of Lumma Stealer, an info-stealing malware used by multiple financially motivated threat actors to target various industries.

Credential theft
April 15
10 min read

Threat actors misuse Node.js to deliver malware and other malicious payloads

Since October 2024, Microsoft Defender Experts has observed and helped multiple customers address campaigns leveraging Node.

Photo of a man holding a tablet and luggage with blue hexagons and the icon for Storm threat actors

Credential theft
March 13
10 min read

Phishing campaign impersonates Booking.com, delivers a suite of credential-stealing malware

Microsoft Threat Intelligence identified a phishing campaign that impersonates online travel agency Booking.

A man wearing glasses and headphones looking at a computer screen

Credential theft
March 6
32 min read

Malvertising campaign leads to info stealers hosted on GitHub

Microsoft detected a large-scale malvertising campaign in early December 2024 that impacted nearly one million devices globally.

Microsoft Cyber Defense Operations Center.

Best practices
January 6
7 min read

Why security teams rely on Microsoft Defender Experts for XDR for managed detection and response

Microsoft Defender Experts for XDR is a mature and proven service that triages, investigates, and responds to incidents and hunts for threats on a customer’s behalf around the clock.

Chief information security officer collaborating with practitioners in a security operations center.

News
October 9, 2023
6 min read

Expanded Microsoft Security Experts offerings provide comprehensive protection

Read about the latest updates to our Microsoft Security Experts product offerings.

Close-up view of focused chief information security officer at work in a security operations center.

Best practices
July 24, 2023
5 min read

Microsoft Defender Experts for XDR helps triage, investigate, and respond to cyberthreats

Take a closer look at how Microsoft Defender Experts for XDR works, and how it complements the power of the Microsoft 365 Defender suite.

Man in a hooded sweatshirt inside a secure room, pointing at a geographic area displayed on a large monitor.

News
July 10, 2023
5 min read

Meet unprecedented security challenges by leveraging MXDR services

Microsoft is excited to announce the general availability of Microsoft Defender Experts for XDR, a first-party MXDR offering that gives security teams air cover with end-to-end protection and expertise.

Multicolor arrows pointing towards a center dot, with a yellow diamond filled with 1’s and 0’s and a bug crawling towards it to suggest malware.

Cybersecurity
February 8, 2023
2 min read

Solving one of NOBELIUM’s most novel attacks: Cyberattack Series

This is the first in an ongoing series exploring some of the most notable cases of the Microsoft Detection and Response Team (DART), which investigates cyberattacks on behalf of our customers.

Male developer coding in front of two monitors at desk in office. Programming code shown on both monitors.

Cybersecurity
November 16, 2022
9 min read

Token tactics: How to prevent, detect, and respond to cloud token theft

As organizations increase their coverage of multifactor authentication (MFA), threat actors have begun to move to more sophisticated techniques to allow them to compromise corporate resources without needing to satisfy MFA.

Two males and three females collaborating in a conference room featuring an HP Teams Meeting Rooms touch display. The meeting has nine remote participants shown on a wall mounted display joined via Teams Meetings. Two subjects are using Surface devices.

Cybersecurity
November 2, 2022
9 min read

Microsoft Security tips for mitigating risk in mergers and acquisitions

Mergers and acquisitions can be challenging.

Man sitting at a community table in common area typing on a Surface laptop with a phone at his side. Blurred laptop in foreground.

Cybersecurity
October 26, 2022
7 min read

How to prevent lateral movement attacks using Microsoft 365 Defender

Learn how Microsoft 365 Defender can enhance mitigations against lateral movement paths in your environment, stopping attackers from gaining access to privileged and sensitive accounts.

Microsoft Security Experts posts