@hoernchen72 @fasnix @expertenkommision_cyberunfall EXAKT DAS!

Oft sind das #Betrüber die Menschen dazu überreden (#SocialEngineering / #SocialHacking) und/oder entsprechend #FUD machen.

• Gibt da genug Kanäle wie "#JimBrowning" und "#ScammerPayback" die aktiv diese Dinge zerlegen.

Ist nix anderes als die #Schockanruf-Taktik, nur halt 'irgendwas mit #Cyber' und sei's nen Fake-#Popup.

• Deshalb sind #AdBlocker auch #Notwehr & #Nothilfe!

@GossiTheDog the sheer fact that #MSPs & #CSPs can access clients' setups without proper #authorization [including #KYC / #KYB, #AuthCode|s and proper authorization via contract] is already sickening.

• This literally begs to be abused via #SocialEngineering / #SocialHacking of #Microsoft personnel or just blatant "#PrivilegueEscalation" through falsefully claiming to be a #MSP / #CSP contracted by the targeted company.

Such fundamental #ITsec fuckups are reasons alone not to use #Azure or any #Microsoft products & services at all...

• I mean, it doesn't require #Mitnick-level skills to pull this off, since it doesn't necessitate #Lapsus-Style #SIMswap or other means to gain access...