• bitcoinBitcoin (BTC) $ 96,195.00
  • ethereumEthereum (ETH) $ 2,642.91
  • tetherTether (USDT) $ 1.00
  • xrpXRP (XRP) $ 2.41
  • solanaSolana (SOL) $ 200.16
  • bnbBNB (BNB) $ 624.14
  • usd-coinUSDC (USDC) $ 0.999901
  • dogecoinDogecoin (DOGE) $ 0.251613
  • staked-etherLido Staked Ether (STETH) $ 2,638.88
  • cardanoCardano (ADA) $ 0.688832
  • tronTRON (TRX) $ 0.236241
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 95,838.00
  • chainlinkChainlink (LINK) $ 18.70
  • wrapped-stethWrapped stETH (WSTETH) $ 3,158.37
  • avalanche-2Avalanche (AVAX) $ 24.87
  • stellarStellar (XLM) $ 0.317884
  • the-open-networkToncoin (TON) $ 3.82
  • suiSui (SUI) $ 3.04
  • shiba-inuShiba Inu (SHIB) $ 0.000016
  • leo-tokenLEO Token (LEO) $ 9.81
  • hedera-hashgraphHedera (HBAR) $ 0.233232
  • usdsUSDS (USDS) $ 0.999481
  • litecoinLitecoin (LTC) $ 108.04
  • hyperliquidHyperliquid (HYPE) $ 22.87
  • bitget-tokenBitget Token (BGB) $ 6.36
  • wethWETH (WETH) $ 2,642.89
  • polkadotPolkadot (DOT) $ 4.78
  • bitcoin-cashBitcoin Cash (BCH) $ 326.12
  • ethena-usdeEthena USDe (USDE) $ 0.999954
  • mantra-daoMANTRA (OM) $ 5.84
  • uniswapUniswap (UNI) $ 9.24
  • wrapped-eethWrapped eETH (WEETH) $ 2,800.05
  • ondo-financeOndo (ONDO) $ 1.32
  • moneroMonero (XMR) $ 220.81
  • pepePepe (PEPE) $ 0.000009
  • whitebitWhiteBIT Coin (WBT) $ 27.23
  • nearNEAR Protocol (NEAR) $ 3.24
  • aaveAave (AAVE) $ 243.67
  • daiDai (DAI) $ 1.00
  • mantleMantle (MNT) $ 1.02
  • aptosAptos (APT) $ 5.89
  • internet-computerInternet Computer (ICP) $ 6.97
  • official-trumpOfficial Trump (TRUMP) $ 16.55
  • susdssUSDS (SUSDS) $ 1.04
  • ethereum-classicEthereum Classic (ETC) $ 20.28
  • bittensorBittensor (TAO) $ 360.50
  • okbOKB (OKB) $ 47.09
  • gatechain-tokenGate (GT) $ 21.14
  • vechainVeChain (VET) $ 0.032537
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.307816
  • crypto-com-chainCronos (CRO) $ 0.093360
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 96,062.00
  • algorandAlgorand (ALGO) $ 0.278584
  • kaspaKaspa (KAS) $ 0.087857
  • tokenize-xchangeTokenize Xchange (TKX) $ 28.04
  • render-tokenRender (RENDER) $ 4.25
  • jupiter-exchange-solanaJupiter (JUP) $ 0.830546
  • filecoinFilecoin (FIL) $ 3.32
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.998986
  • cosmosCosmos Hub (ATOM) $ 4.58
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 0.757553
  • arbitrumArbitrum (ARB) $ 0.452177
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 95,740.00
  • fasttokenFasttoken (FTN) $ 3.93
  • binance-staked-solBinance Staked SOL (BNSOL) $ 207.49
  • binance-peg-wethBinance-Peg WETH (WETH) $ 2,642.02
  • celestiaCelestia (TIA) $ 3.04
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 2,737.45
  • ethenaEthena (ENA) $ 0.480689
  • kucoin-sharesKuCoin (KCS) $ 12.14
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 96,053.00
  • optimismOptimism (OP) $ 1.07
  • xdce-crowd-saleXDC Network (XDC) $ 0.091501
  • raydiumRaydium (RAY) $ 4.83
  • immutable-xImmutable (IMX) $ 0.805066
  • blockstackStacks (STX) $ 0.899252
  • bonkBonk (BONK) $ 0.000017
  • lido-daoLido DAO (LDO) $ 1.50
  • rocket-pool-ethRocket Pool ETH (RETH) $ 2,972.57
  • injective-protocolInjective (INJ) $ 13.53
  • nexoNEXO (NEXO) $ 1.32
  • sonic-3Sonic (prev. FTM) (S) $ 0.408337
  • theta-tokenTheta Network (THETA) $ 1.30
  • the-graphThe Graph (GRT) $ 0.131779
  • mantle-staked-etherMantle Staked Ether (METH) $ 2,790.05
  • movementMovement (MOVE) $ 0.530388
  • flare-networksFlare (FLR) $ 0.021095
  • worldcoin-wldWorldcoin (WLD) $ 1.22
  • usual-usdUsual USD (USD0) $ 0.998083
  • dexeDeXe (DEXE) $ 19.98
  • jasmycoinJasmyCoin (JASMY) $ 0.022240
  • solv-protocol-solvbtc-bbnSolv Protocol SolvBTC.BBN (SOLVBTC.BB) $ 95,668.00
  • sei-networkSei (SEI) $ 0.227711
  • msolMarinade Staked SOL (MSOL) $ 253.06
  • galaGALA (GALA) $ 0.021873
  • the-sandboxThe Sandbox (SAND) $ 0.382067
  • eosEOS (EOS) $ 0.608040
  • tezosTezos (XTZ) $ 0.887671
  • flokiFLOKI (FLOKI) $ 0.000094
  • bittorrentBitTorrent (BTT) $ 0.00000086
  • ultimaUltima (ULTIMA) $ 19,263.09
  • ethereum-name-serviceEthereum Name Service (ENS) $ 25.13
  • chain-2Onyxcoin (XCN) $ 0.024867
  • iotaIOTA (IOTA) $ 0.220948
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 216.69
  • makerMaker (MKR) $ 901.35
  • flowFlow (FLOW) $ 0.499418
  • bitcoin-svBitcoin SV (BSV) $ 39.26
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 95,864.00
  • kaiaKaia (KAIA) $ 0.130238
  • wbnbWrapped BNB (WBNB) $ 624.16
  • neoNEO (NEO) $ 10.64
  • usddUSDD (USDD) $ 1.00
  • jito-governance-tokenJito (JTO) $ 2.51
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 1.11
  • pyth-networkPyth Network (PYTH) $ 0.195544
  • tether-goldTether Gold (XAUT) $ 2,863.37
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 2,733.96
  • dogwifcoindogwifhat (WIF) $ 0.680733
  • roninRonin (RON) $ 1.09
  • axie-infinityAxie Infinity (AXS) $ 4.21
  • curve-dao-tokenCurve DAO (CRV) $ 0.512565
  • fraxFrax (FRAX) $ 0.995916
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.251864
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 2,790.55
  • usdx-money-usdxusdx.money USDX (USDX) $ 0.998996
  • pudgy-penguinsPudgy Penguins (PENGU) $ 0.009909
  • elrond-erd-2MultiversX (EGLD) $ 22.32
  • aerodrome-financeAerodrome Finance (AERO) $ 0.808758
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 2,641.92
  • starknetStarknet (STRK) $ 0.236720
  • heliumHelium (HNT) $ 3.44
  • meowMEOW (MEOW) $ 0.006774
  • decentralandDecentraland (MANA) $ 0.320381
  • pax-goldPAX Gold (PAXG) $ 2,886.52
  • arweaveArweave (AR) $ 9.08
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 2,645.81
  • paypal-usdPayPal USD (PYUSD) $ 0.999958
  • berachain-beraBerachain (BERA) $ 5.26
  • pumpbtcpumpBTC (PUMPBTC) $ 92,901.00
  • spx6900SPX6900 (SPX) $ 0.596117
  • matic-networkPolygon (MATIC) $ 0.307645
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 2,641.31
  • resolv-usrResolv USR (USR) $ 1.00
  • dydx-chaindYdX (DYDX) $ 0.751059
  • chilizChiliz (CHZ) $ 0.058415
  • conflux-tokenConflux (CFX) $ 0.109943
  • telcoinTelcoin (TEL) $ 0.006834
  • beldexBeldex (BDX) $ 0.076998
  • pendlePendle (PENDLE) $ 3.17
  • ecasheCash (XEC) $ 0.000026
  • pancakeswap-tokenPancakeSwap (CAKE) $ 1.77
  • beam-2Beam (BEAM) $ 0.009771
  • insurance-2INSURANCE (INSURANCE) $ 27.28
  • zcashZcash (ZEC) $ 32.04
  • bitcoin-avalanche-bridged-btc-bAvalanche Bridged BTC (Avalanche) (BTC.B) $ 96,016.00
  • kavaKava (KAVA) $ 0.461065
  • coredaoorgCore (CORE) $ 0.527408
  • apecoinApeCoin (APE) $ 0.689062
  • true-usdTrueUSD (TUSD) $ 0.997285
  • wormholeWormhole (W) $ 0.171477
  • fartcoinFartcoin (FARTCOIN) $ 0.484269
  • clbtcclBTC (CLBTC) $ 95,714.00
  • akash-networkAkash Network (AKT) $ 1.94
  • reserve-rights-tokenReserve Rights (RSR) $ 0.008630
  • amp-tokenAmp (AMP) $ 0.005600
  • aioz-networkAIOZ Network (AIOZ) $ 0.403759
  • chex-tokenCHEX Token (CHEX) $ 0.463014
  • tbtctBTC (TBTC) $ 95,506.00
  • gnosisGnosis (GNO) $ 175.99
  • compound-governance-tokenCompound (COMP) $ 50.95
  • based-brettBrett (BRETT) $ 0.045503
  • apenftAPENFT (NFT) $ 0.00000045
  • quantixaiQuantixAI (QAI) $ 84.32
  • deepDeepBook (DEEP) $ 0.175146
  • morphoMorpho (MORPHO) $ 1.98
  • thorchainTHORChain (RUNE) $ 1.21
  • stakestone-berachain-vault-tokenStakeStone Berachain Vault Token (BERASTONE) $ 2,602.27
  • mina-protocolMina Protocol (MINA) $ 0.345717
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 0.999793
  • super-oethSuper OETH (SUPEROETHB) $ 2,641.08
  • usdbUSDB (USDB) $ 0.995466
  • hashnote-usycHashnote USYC (USYC) $ 1.08
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 2,880.66
  • newton-projectNewton Project (NEW) $ 0.009142
  • olympusOlympus (OHM) $ 24.36
  • zksyncZKsync (ZK) $ 0.107849
  • eigenlayerEigenlayer (EIGEN) $ 1.68
  • axelarAxelar (AXL) $ 0.427273
  • ai-companionsAI Companions (AIC) $ 0.387832
  • ai16zai16z (AI16Z) $ 0.347225
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000069
  • mimblewimblecoinMimbleWimbleCoin (MWC) $ 34.33
  • polygon-pos-bridged-weth-polygon-posPolygon PoS Bridged WETH (Polygon POS) (WETH) $ 2,641.18
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.06
  • trust-wallet-tokenTrust Wallet (TWT) $ 0.901036
  • 1inch1inch (1INCH) $ 0.259166
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 95,771.00
  • frax-etherFrax Ether (FRXETH) $ 2,642.19
  • stader-ethxStader ETHx (ETHX) $ 2,776.95

Microsoft Issues Major Crypto Warning

0 210

Microsoft Issues Major Crypto Warning

  u.today 32 m

Microsoft Issues Major Crypto Warning

Microsoft’s security team has warned that cybercriminals are exploiting a system called OAuth, which websites use to verify your identity.

The criminals hijack user accounts to give themselves special access to the system.

By gaining control over these accounts, they can manipulate OAuth applications to gain extensive access and permissions, thus facilitating various forms of cybercrime, including illicit crypto mining.

Modus operandi

The exploitation of OAuth applications presents a complex challenge. Attackers first compromise user accounts through phishing or password-spraying attacks, particularly targeting accounts lacking strong authentication mechanisms.

These accounts are then used to deploy VMs for crypto mining, establish persistence in the aftermath of BEC and launch spamming activities using the organization’s resources.

Microsoft has tracked these activities extensively, enhancing the detection of malicious OAuth applications through tools like Microsoft Defender for Cloud Apps and preventing compromised accounts from accessing resources.

Mitigating risks

Microsoft’s analysis of these attacks has led to several recommendations for organizations to mitigate such threats.

First, securing identity infrastructure is critical. The majority of the compromised accounts did not have multifactor authentication (MFA) enabled. This made them vulnerable to credential-guessing attacks. Implementing MFA can dramatically reduce the risk of such attacks.

In addition to MFA, Microsoft advises enabling conditional access policies and continuous access evaluation, which revoke access in real time when risks are detected.

Security defaults in Azure AD provide essential protection for organizations, especially those on the free tier of Azure Active Directory licensing. These include preconfigured security settings like MFA and protection for privileged activities.

Organizations are also encouraged to audit apps and the permissions they have been granted to ensure they adhere to the principles of least privilege.

Source

Leave A Reply

Your email address will not be published.