ctipilot.ch

NCSC-CH Week 25 M365 voicemail phishing wave (CH)

campaign · campaign:ncsc-ch-m365-voicemail-phishing-week25

Coverage timeline
1
first 2026-06-25 → last 2026-06-25
Briefs
1
1 distinct
Sources cited
140
66 hosts
Sections touched
1
active_threats
Co-occurring entities
0
no co-occurrence

Story timeline

  1. 2026-06-25CTI Daily Brief — 2026-06-25
    active_threatsFirst coverage. Dual-path ZIP-infostealer / fake-login M365 credential theft in CH; downstream BEC + chain phishing.

Where this entity is cited

  • active_threats1

Source distribution

  • security-hub.ncsc.admin.ch27 (19%)
  • bleepingcomputer.com8 (6%)
  • helpnetsecurity.com7 (5%)
  • ncsc.admin.ch5 (4%)
  • securityweek.com5 (4%)
  • thehackernews.com5 (4%)
  • attack.mitre.org4 (3%)
  • cisa.gov3 (2%)
  • other76 (54%)

All cited sources (140)

Items in briefs about NCSC-CH Week 25 M365 voicemail phishing wave (CH)

No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.