Luna Moth Targets Law Firms Again

Extortion group Luna Moth re-targets law firms that refused its first ransom, weeks to months later. The group abandons remote tools for a vishing campaign to steal Microsoft access tokens. ReliaQuest reports this tactic exploits weak default settings like 60, 90 minute token lifetimes and unenforced Continuous Access Evaluation.