Hackers Clone Microsoft Login Portals to Capture Credentials and Session Tokens in Real Time

An active adversary-in-the-middle (AiTM) phishing campaign that clones Microsoft authentication pages to intercept credentials, Multi-Factor Authentication (MFA) codes, and session tokens in real time. Rather than relying on simple password harvesting, this technique hijacks authenticated user sessions directly. Detailed by Infoblox Threat Intel researchers Darby Wise and Nick Sundvall, the widespread campaign has targeted universities, […]

The post Hackers Clone Microsoft Login Portals to Capture Credentials and Session Tokens in Real Time appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.