Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Let op: Dit artikel is automatisch opgehaald uit een externe bron en nog niet vertaald of bewerkt. Publicatie vereist handmatige review.

Originele bron: The Hacker News

---

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. According to ANY.RUN research, 48% of targeted email addresses were potentially compromised. Most of the affected companies are US-based. Mirage2FA Campaign

Bron: The Hacker News — Lees het volledige artikel

Gerelateerde artikelen

PhishingNieuwe malware SynkLoader verspreid via phishing op Microsoft TeamsAanvallers doen zich voor als IT-helpdesk via Microsoft Teams en verleiden slachtoffers tot het installeren van een nep-PowerShell Cleaner, die uiteindelijk de nieuwe malware SynkLoader plaatst, inclusief een module die een vals Windows-vergrendelscherm toont om wachtwoorden te stelen.21 aug 2026PhishingFake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA CodesCybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agent...26 aug 2026Phishing24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA PagesCybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAP...25 aug 2026PhishingAnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodesA newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock fe...25 aug 2026