BigBear 2.0 phishing campaign hijacks M365 sessions

A large-scale phishing operation has compromised thousands of Microsoft 365 accounts by stealing authenticated session cookies that remain valid even after users complete multifactor authentication.

This article has been indexed from CyberMaterial

Read the original article: