Bubble is a technology platform tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed March 24, 2026; most recent activity March 25, 2026.
Cybercriminals are leveraging the no-code app-building platform Bubble to create and host malicious web applications that target Microsoft accounts. These phishing campaigns utilize legitimate Bubble-hosted URLs, which…