The Microsoft Threat Intelligence Center (MSTIC) has released a blog post describing an increase in malicious cyber activity from the Iranian group known as Phosphorus. These threat actors are exploiting password reset or account recovery features to take control of targeted email accounts.
CDSBureau Inc. encourages users to review the Microsoft blog for additional information and recommendations and Cyber Security and Infrastructure Security (CISA) ’s Tip on Supplementing Passwords.