Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Firms

The threat actor, known as APT29 or BlueBravo, uses diverse methods including compromised accounts, OAuth applications, and password spraying to gain and maintain access, making traditional indicators of compromise-based detection ineffective.