Microsoft: BEC Attackers Evade ‘Impossible Travel’ Flags With Residential IP Addresses

Threat actors are circumventing geo-location-based security detections, using a combination of cybercrime-as-a-service platforms and the purchasing of local IP addresses.