Tag: MFA bypass
Phishing kit rides genuine Docusign mail to swipe Microsoft sessions
The NovaCookies phishing service uses genuine Docusign notifications to steal Microsoft 365 sessions in real time.
Phishing kit bypasses 2FA across 4,500 corporate domains
A two-year phishing-as-a-service campaign bypasses 2FA across more than 4,500 Microsoft 365 domains.
ZeroBytes peddles 2M French taxpayer records on hacking forum
France's DGFiP confirms a June intrusion that exposed taxpayer data.
Extortion crew UNC6671 leans on personal mobiles in SaaS raids
Google ties a vishing wave against finance and legal firms to UNC6671, which calls staff on personal phones.
Okta warns of vishing attacks targeting Microsoft 365 user credentials
Okta warns of a rise in voice phishing attacks where callers impersonate IT support to steal Microsoft 365 credentials and…
Cybercriminals Weaponize Vishing and SSO Hijacking for Rapid SaaS Extortion
Vishing calls are successfully coercing help desk staff into resetting MFA, enabling attackers to steal SSO tokens, encrypt data, and…