Sneaky2FA Phishing Kit Enhances Tactics with Browser-in-the-Browser Functionality

The Sneaky2FA phishing-as-a-service kit has been upgraded to include Browser-in-the-Browser (BITB) techniques, allowing attackers to create deceptive phishing pages that mimic legitimate login interfaces. This evolution targets Microsoft 365 accounts by embedding fake login forms within a browser window on the victim's desktop, effectively stealing credentials and session cookies. The kit's recent capabilities indicate a significant advancement in phishing tactics.