AI Summary

The Mirage2FA phishing‑as‑a‑service campaign has impacted thousands of firms between 2024 and 2026, focusing on Microsoft 365 accounts. The toolkit exploits legitimate login flows to bypass two‑factor authentication, allowing attackers to harvest credentials. Research from ANY.RUN indicates that nearly half of the targeted email addresses—about 48%—may have been compromised. This activity has been observed across both U.S. and EU companies, with the total number of affected organizations reaching roughly 4,500.

AI summaries can be wrong sometimes—always verify important details using the source article.