Signed Malware Impersonating Workplace Apps Used To Deploy RMM Backdoors

How Attackers Abuse Application Signing

Microsoft Device Code Phishing Campaign Targets M365 Accounts

MLTBackdoor: New Ransomware-Linked Backdoor Evades Detection via Microsoft Defender DLL Sideloading

MLTBackdoor is a newly identified backdoor malware family (observed May 2026) used by ransomware-affiliated threat actors for initial access

Phishing Campaign Leveraging the NPM Ecosystem

North Korean Hackers Exploit Visual Studio Code to Deploy Backdoor Malware via Git Repositories

Jamf Threat Labs has identified North Korean threat actors expanding their abuse of Microsoft Visual Studio Code to deploy backdoor malware.

Microsoft 365 device code phishing campaign abuses legitimate login flow to target accounts

A Microsoft 365 device code phishing campaign observed in late June and early July 2026 abused Microsoft's legitimate device login flow to t