GhostCode

The Latest

GhostCode Phishing Kit Hijacks Microsoft Accounts Despite MFA

New GhostCode Phishing Kit Hijacks Microsoft Accounts Despite MFA

FBI Seizes NightmareStresser DDoS-for-Hire Domains in Operation PowerOFF

FBI Seizes NightmareStresser DDoS-for-Hire Domains in Operation PowerOFF

An ISP Data Leak Can Expose More Than Your Password

An ISP Data Leak Can Expose More Than Your Password

2 Critical Calendar WordPress Plugin Flaws Put 600K Sites at Risk of Takeover

2 Critical Calendar WordPress Plugin Flaws Put 600K Sites at Risk of Takeover

GhostCode Phishing Kit Hijacks Microsoft Accounts Despite MFA

Read More

3 minute read

New GhostCode Phishing Kit Hijacks Microsoft Accounts Despite MFA

eSentire uncovers the GhostCode phishing kit abusing Microsoft OAuth to steal tokens, register attacker devices and access Microsoft 365 accounts.

September 17, 2026