AI Summary

A phishing‑as‑a‑service framework named BigBear 2.0 was used to bypass multi‑factor authentication at 258 organizations, resulting in the theft of over 5,000 Microsoft 365 credentials. CloudSEK researchers obtained administrator access to the service’s control panel and discovered it operated 42 VPS nodes, each configured to target Microsoft 365 accounts. The findings reveal a large‑scale campaign that successfully evaded MFA protections across numerous enterprises.

AI summaries can be wrong sometimes—always verify important details using the source article.