All Huntress Blog Posts

All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Dave Kleinatland
Threat Research
Riding the Rails: Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure
Riding the Rails: Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure

Attackers turned Railway.com's free cloud platform into a Microsoft 365 token-stealing machine, hitting 268+ organizations and 100+ MSPs. Here's the full infrastructure breakdown.