This is awesome. Our teams have fake tenants as honeypots that look like real ones—they contain realistic-looking data with realistic-looking users. But they’ve taken honeypots to a whole new level. They’re not just waiting for someone to fall into the trap. They actively search for phishing sites and fill in real login credentials of users from these tenants. Then they track how attackers misuse these credentials—what activities they perform, how they proceed, where they come from, etc. And they use this information to populate our TI databases and improve detections. Super cool! bleepingcomputer.com/news/se…