Microsoft

Three phishing-as-a-service (PhaaS) kits are actively targeting US organizations to steal Microsoft 365 credentials by bypassing multi-factor authentication (MFA). The kits use adversary-in-the-middle (AiTM) techniques to intercept session tokens, allowing attackers to access accounts even when MFA is enabled. This poses a significant threat to endpoint security as...