BigBear 2.0: Evilginx2 Phishing Platform Bypasses Microsoft 365 MFA at Scale
A user may enter the correct password, complete MFA verification, and still lose their Microsoft 365 account. The phishing platform BigBear 2.0 intercepts the authenticated session after the second factor and delivers the attacker...