Milk Dragon uses real-time OTP relay and WebSocket keylogging to beat MFA via fake shops. #CyberSecurity #Phishing #MFA #PhaaS #WebSocket #FraudDetection thedailytechfeed.com/milk-dragon-...

Microsoft dismantled the EvilTokens phishing platform, an AI-powered service that hijacked 12,000+ mailboxes via OAuth Device Code Flow abuse.

#EvilTokens #Microsoft #PhaaS #DeviceCodePhishing #Storm2992 #OAuth #CyberSecurity

#EvilTokens #PhaaS disrupted after compromising 12,000 #Microsoft accounts

https://www.bleepingcomputer.com/news/security/eviltokens-phaas-disrupted-after-compromising-12-000-microsoft-accounts/

#phishing #cybersecurity #cybercrime

BigBear 2.0 phishing bypasses Microsoft 365 MFA via Evilginx2, stealing 474 sessions across 461 orgs in 40+ countries as a PhaaS service.

#BigBear20 #Evilginx2 #Phishing #MFABypass #Microsoft365 #AiTM #PhaaS

BigBear 2.0: la piattaforma di phishing-as-a-service che aggira anche l’MFA di Microsoft 365
il blog: insicurezzadigitale.com/bigbear-2-0-...

#cybersecurity #aitm #cybercrime #evilginx2 #infosec #mfabypass #microsoft365 #phaas #phishing #spearphishing

Global PhaaS 'BigBear 2.0' uses custom Evilginx2 to bypass MFA in Microsoft 365 attacks. The service steals session cookies, targeting MSPs and IT firms. Phishing-resistant MFA is the key defense. #PhaaS #MFA #M365 #Phishing #CyberSecurity

🌐 cyber[.]netsecops[.]io

The Outsider Phishing Kit persists despite the Operation Ghost Hook takedown. Discover how the ChenLun Outsider PhaaS kit bypasses MFA via AiTM attacks.

#OutsiderPhishingKit #OperationGhostHook #PhaaS #ChenLun #Cybercrime #Smishing