Cybersecurity News
Filters
Filtered by tag: credential harvesting × Clear
Doubloon Dredger Abuses Notion to Harvest Authentication Tokens
A threat actor dubbed Doubloon Dredger used malicious PDFs to redirect victims to fake Microsoft login pages hosted via Notion. The campaign harvested Microsoft authentication tokens, exploiting Notion's legitimate infrastructure to evade detection. The abuse of trusted platforms helped the attackers bypass security filters while capturing credentials from targeted users.