New BitB Phishing Attack Targets Microsoft 365 Logins

A new Browser-in-the-Browser (BitB) phishing campaign is abusing fake OAuth login windows to steal Microsoft 365 credentials, and its design is polished enough to bypass casual visual checks. The attack uses a draggable popup that mimics a real browser dialog. However, it is embedded in the page itself and paired with a spoofed Microsoft OAuth […]

The post New BitB Phishing Attack Targets Microsoft 365 Logins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.