analiza aiqbench
This article details a sophisticated phishing-as-a-service tool that bypasses Multi-Factor Authentication (MFA) by hijacking authenticated sessions rather than breaking cryptographic algorithms. The threat involves an Adversary-in-the-Middle framework allowing attackers to proxy legitimate login data while stealing session cookies, granting persistent access to enterprise resources like email and cloud storage without triggering secondary prompts. This represents a significant evolution in social engineering attacks that undermines the current security perimeter of Microsoft 365 environments through automated credential harvesting.
Hackers Let Microsoft 365 Users Complete MFA, Then Steal Logged-In Sessions
A sophisticated Phishing-as-a-Service (PhaaS) platform marketed as Mirage2FA is enabling threat actors to bypass multi-factor authentication (MFA) by allowing Microsoft 365 users to complete their regular login process before covertly stealing the authenticated session. Threat researchers at ANY.RUN discovered that the Adversary-in-the-Middle (AiTM) framework generated thousands of potential compromise events from late 2024 through 2026, […] The post Hackers Let Microsoft 365 Users Complete MFA, Then Steal Logged-In Sessions appeared first on Cyber Security News.
A sophisticated Phishing-as-a-Service (PhaaS) platform marketed as Mirage2FA is enabling threat actors to bypass multi-factor authentication (MFA) by allowing Microsoft 365 users to complete their regular login process before covertly stealing the authenticated session. Threat researchers at ANY.RUN discovered that the Adversary-in-the-Middle (AiTM) framework generated thousands of potential compromise events from late 2024 through 2026, with the overwhelming majority resulting in hijacked session cookies rather…
Extras afișat conform termenilor RSS ai publicației · 65 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026)
Cybersecurity News · 28 iul. 2026
Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · 23 aug. 2026
Microsoft 365 Device Code Phishing Campaign Bypasses Password Theft With Legitimate Login Flow
Cybersecurity News · 16 iun. 2026
Hackers Use Microsoft Graph Reconnaissance to Target Payroll and HR Employees
Cybersecurity News · 15 iun. 2026