Threat actors targeted a company with an attempted account takeover attack, using phishing emails to harvest credentials and hijackMicrosoft accounts.  

Darktrace detected both the initial phishing emails and the resulting cracked accounts. With an immediate alert from Darktrace, the security team was able to prevent further disruption, such as a data leak. Beyond notifying the security team, Darktrace can also take autonomous actions to neutralize attacks.