@cyberveille-ch.bsky.social📢 BigBear 2.0 : campagne PhaaS Evilginx2 ciblant Microsoft 365 dans 40+ pays
Cet article présente les résultats d'une investigation menée par l'équipe TRIAD ayant obtenu un accès administrateur au panneau de contrôle de la…
🟢 vérification factuelle haute
#BigBear20 #Evilginx2 #Cyberveille
@securityonline.bsky.socialBigBear 2.0 phishing bypasses Microsoft 365 MFA via Evilginx2, stealing 474 sessions across 461 orgs in 40+ countries as a PhaaS service.
#BigBear20 #Evilginx2 #Phishing #MFABypass #Microsoft365 #AiTM #PhaaS
@nuke86.rfeed.itBigBear 2.0: la piattaforma di phishing-as-a-service che aggira anche l’MFA di Microsoft 365
il blog: insicurezzadigitale.com/bigbear-2-0-...
#cybersecurity #aitm #cybercrime #evilginx2 #infosec #mfabypass #microsoft365 #phaas #phishing #spearphishing
@thedailytechfeed.comBigBear 2.0 hijacks Microsoft 365 sessions post-MFA with Evilginx2 cookie theft. #SecurityNews #Microsoft365 #Phishing #Evilginx2 #MFABypass #Cybersecurity https://thedailytechfeed.com/bigbear-2-0-phishing-steals-mfa-protected-microsoft-365-sessions/
@intelfusions.comA phishing platform sold to affiliates has collected more than 4,000 live Microsoft 365 session cookies. Its login pages switch off hardware security keys so victims fall back to a weaker check the attackers can steal.
@threadlinqs.bsky.socialBigBear 2.0 Evilginx2 PhaaS: custom JS disables FIDO2, bypasses MFA at 258 orgs. https://intel.threadlinqs.com/threat/TL-2026-2374 #ThreatIntel #telegram #evilginx2 #ipapiis
@hendryadrian.bsky.socialBigBear 2.0 bypassed MFA at 258 organizations and stole 5,000+ Microsoft 365 credentials using Evilginx2, geo-matched proxies, and live cookie exfiltration bots. #BigBear20 #Microsoft365 #Evilginx2