Attack Simulator › Undocumented Features

April 12, 2018October 12, 2018

Using the Dictionary for Fun and Profit

In my previous post, I discussed using the new Attack Simulator for crafting phishing campaigns against your users. If you haven’t tried it out yet, I’d heartily recommend it. It’s more fun than a barrel of monkeys.

For this post, we’re going to shift into slightly more traditional attack strategies. … [ Continue reading ]

April 11, 2018October 3, 2018

Let’s Go Phishing – Spear Phishing, That Is

Over the last few weeks, we’ve released some great new features for Office 365 Advanced Threat Protection users. The Attack Simulator has three core components, each of which I’ll cover in a series:

Spear Phishing (Credential Harvest)
Brute Force Password (Dictionary Attack)
Password Spray Attack

For this post, I want to focus on the Spear Phishing campaign.… [ Continue reading ]