PhishingInfosecurity Magazine·4 hours ago
Doubloon Dredger Abuses Notion to Harvest Authentication Tokens
Threat actor Doubloon Dredger is leveraging Notion, a legitimate productivity platform, alongside malicious PDFs to conduct authentication token harvesting attacks targeting Microsoft credentials. This technique exploits user trust in commonly-used services to compromise account access and enable lateral movement within targeted organizations.