Skip to the main content.

ABT Blog

Read about mortgage technology solutions topics

phishing

Microsoft-branded hero image for ABT blog article: The Exploit: Anatomy of a Modern Cyber Heist Part 2 - The Perfect Phish. Banks, credit unions, and mortgage companies.

14 min read

The Exploit: Anatomy of a Modern Cyber Heist Part 2 - The Perfect Phish

In This Article Tycoon2FA: 13 Million Phishing Emails in a Single Month How Adversary-in-the-Middle Attacks Defeat Standard MFA NYDFS Part 500 Is Now...

Read More
Microsoft Defender for Office 365 anti-phishing configuration for credit unions, banks, and mortgage companies

19 min read

Microsoft Defender for Office 365 for Financial Institutions: The Anti-Phishing Configuration Examiners Expect

In This Article The Phishing Reality for Banks, Credit Unions, and Mortgage Companies in 2026 What You Actually Own: Defender for Office 365 Plan 1...

Read More
Phishing-resistant MFA for financial institutions: hardware-backed FIDO2 security keys, passkeys, and Microsoft Entra ID Conditional Access protecting against AiTM, credential theft, and phishing attacks

16 min read

Phishing-Resistant MFA for Financial Institutions: Why FFIEC, NCUA, and OCC Examiners Now Expect FIDO2, Passkeys, and Hardware Keys

In This Article What "Phishing-Resistant" Authentication Actually Means Why SMS, Push, and One-Time Codes No Longer Pass the Bar What FFIEC Examiners...

Read More
Microsoft-branded hero image for ABT blog article: Code of Conduct AiTM Phishing: How 35,000 Users in 13,000 US Organizations Were Compromised in 72 Hours - What Banks, Credit Unions, and Mortgage Companies Must Verify Now. Banks, credit unions, and mortga

18 min read

Code of Conduct AiTM Phishing: How 35,000 Users in 13,000 US Organizations Were Compromised in 72 Hours - What Banks, Credit Unions, and Mortgage Companies Must Verify Now

In This Article What Happened: 72 Hours, 35,000 Users, 13,000 Organizations Why a Code of Conduct Lure Works on Financial Institution Users The...

Read More
VENOM PhaaS QR code AiTM phishing attack targeting financial institution executives

14 min read

VENOM PhaaS: MFA Bypass Targeting Financial Executives

In This Article What Is VENOM? The QR Code That Email Security Cannot See The Attack Chain: From Inbox to Persistent Access Why Standard MFA Does Not...

Read More
Microsoft 365 device code phishing attack pathway showing token replay from Railway PaaS infrastructure to a compromised financial institution tenant

26 min read

M365 Device Code Phishing: MFA Is Being Bypassed at Scale

Prefer to watch? Every security control did its job. The tokens still went to the attacker. Watch the 26-second Short, then the 10-minute walkthrough...

Read More