An Evilginx2-based phishing-as-a-service (PhaaS) campaign known as BigBear 2.0 has compromised the Microsoft 365 accounts of more than 3,300 victims, including accounts protected by multi-factor ...

BigBear 2.0 案例将这一问题进一步服务化。其运营者以Evilginx2为基础重构管理面板，配置专用Microsoft 365 phishlet，租赁虚拟服务器，使用住宅代理匹配受害地区，借助Telegram机器人向多个附属人员 ...

Una operación de phishing como servicio vinculada a BigBear acumuló miles de credenciales y cookies de sesión de Microsoft 365, incluidas autenticaciones con MFA aparentemente completas. El acceso al ...

This photograph shows a view of Microsoft's logo on the company's French headquarters in Issy-les-Moulineaux on the outskirts of Paris on January 6, 2025. Martin LELIEVRE/AFP via Getty Images A ...

A Microsoft 365 phishing operation targeting hundreds of organizations captured thousands of passwords and session cookies, including hundreds of authenticated sessions that could be hijacked to ...

Dans le détail, l’analyse du kit menée par CloudSEK révèle que BigBear 2.0 repose sur Evilginx2, un outil utilisé pour mener des attaques de phishing Adversary-in-the-Middle, ou AiTM. La page affichée ...

Security researchers have uncovered a new phishing-as-a-service (PhaaS) operation which they claim has already exfiltrated more than 5100 Microsoft 365 credential records from victims. Bigbear 2.0 is ...

Фишинговая платформа на базе Evilginx2 перехватывает Microsoft 365 уже после успешной проверки пользователя. Пользователь может правильно ввести ...

BigBear 2.0 is a phishing operation designed to steal proof that a user has already passed multi-factor authentication. It targets Microsoft 365 accounts through convincing sign-in links, then takes ...

CloudSEK found 4,148 stolen session cookies and 1,032 plaintext passwords in an operation targeting 461 organizations across more than 40 countries. A phishing-as-a-service operation targeting ...