Reckon Russian spies are lurking in your inbox? Check for these IOCs, Microsoft says

Microsoft said it disabled accounts used by Russian-linked Seaborgium troupe to phish and steal credentials from its customers as part of the cybercrime gang's illicit spying and data-stealing activities. This included using email, OneDrive and other Microsoft cloud services accounts, as well as phony LinkedIn profiles that …

[MyffyW]

I, for one, welcome the pivot from blaming scammers in Nigeria to hackers in Russia. Seems so a la mode

[Anonymous Coward]

Better check your “English For Orcs” dictionary, comrade. “A la mode” doesn’t mean what you seem to think it does.

[Anonymous Coward]

adjective

1.

in fashion; up to date.

"corduroy is extremely à la mode this season"

2.

(of beef) braised in wine, typically with vegetables.

"beef à la mode does not necessarily require advance browning"

[M.V. Lipvig]

Seems so with ice cream?

[martinusher]

It all comes down to the question....

....how can a malicious URL or other attachment exist? Are we that architecturally naive? (Or is the marketing imperative to use the same mechanism for 'good' uses so important that we permit it, hoping that some kind of authentication Band-Aid will keep the 'good' and the 'bad' guys apart?)

[Anonymous Coward]

Re: It all comes down to the question....

Good point there could be some level of pre-authentication alongside the https keys that means a site could be considered trustworthy and orgs could block access to untrusted sites or at least have a warning flag.

[Anonymous Coward]

Re: It all comes down to the question....

or if you get server space within the IP range that MS uses, MS parent cert will trust you. Amazon servers within those ranges are available for under $100 and used for this - or so I learned at the convention