New AiTM Attack Campaign Bypasses MFA to Target Microsoft 365 and Okta Users

Gbhackers •Mayura Kathir • December 12, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New AiTM Attack Campaign Bypasses MFA for Microsoft 365 and Okta Users A phishing campaign targeting Microsoft 365 and Okta users has emerged, successfully bypassing multi-factor authentication. Discovered in early December 2025, this campaign employs advanced techniques to exploit authentication flows and affects organizations across various industries. 2 sources 24

Extracted Entities

New AiTM Attack Campaign Bypasses MFA to Target Microsoft 365 and Okta Users

The full story

Extracted Entities

Campaigns (1)

Companies (1)

Platforms (1)