A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining ...
GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.