AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

Adversary-in-the-middle phishing attacks are still more common in use. Since the removal of basic authentication from Exchange Online more and more attackers are using more modern attacks like adversary-in-the-middle phishing, cookie theft, and other used attacks. Last year I blogged about several modern

Bluepurple Pulse: week ending July 9th - by Ollie

AiTM/ MFA phishing attacks in combination with new Microsoft protections (2023 edition)

Bypassing MFA: A Forensic Look at Evilginx2 Phishing Kit

New AiTM Phishing Attack That Bypasses MFA Sets Sights On Microsoft Email Users

Highs and Lows of the Microsoft Digital Defense Report

Pawel Partyka (@Pawp81) / X

Understanding Adversary-In-The-Middle Attacks (AiTM)

Microsoft Warns of Increasing Use of MFA Bypass Tools in Phishing Attacks - My TechDecisions

Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

Microsoft Details Phishing Campaign Targeting Over 10,000 Organizations