Protect Your Data: Russian Spear-Phishing Targets Microsoft 365 Accounts

**Executive Summary:** Multiple Russian threat actors, including SVR-associated Cozy Bear, are conducting targeted spear-phishing attacks against Microsoft 365 accounts—impersonating government and research organizations and abusing Microsoft’s Device Code Authentication flow to trick victims into granting long-term account access through real-time coordinated messages and invites.