New AiTM Attack Campaign Bypasses MFA for Microsoft 365 and Okta Users

First seen 12 Dec 2025, 18:53 UTC • Gbhackers

•24

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A phishing campaign targeting Microsoft 365 and Okta users has emerged, successfully bypassing multi-factor authentication. Discovered in early December 2025, this campaign employs advanced techniques to exploit authentication flows and affects organizations across various industries.

How this analysis works

Attack Flow

Continue Reading

UNC6783 Exploits BPOs for Data Extortion via Phishing Campaigns FBI Warns of Kali365 Phishing Kit Targeting Microsoft 365 Users Critical miniOrange SAML SSO Vulnerabilities Allow WordPress Admin Takeover New Pink Extortion Group Targets Microsoft 365 via Voice Phishing Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation Malicious LLM Proxy Routers Compromise AI Security

New AiTM Attack Campaign Bypasses MFA for Microsoft 365 and Okta Users

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading