Field Analysis
Breaking Down the Code of Conduct Campaign: PDF Lures, CAPTCHA Gates, and AiTM Token Theft
Microsoft detailed an April 2026 campaign that wrapped credential theft in HR disciplinary language, used a CAPTCHA as an anti-analysis gate, and stole tokens through an adversary-in-the-middle proxy.
Read more:Microsoft Security BlogThe Hacker News