Tag #Sneaky Log

What is the immediate impact of the newly discovered Microsoft 365 2FA bypass attack?

A new adversary-in-the-middle attack targeting Microsoft 365 accounts has been discovered by French security researchers. This attack bypasses 2FA and steals credentials, leveraging a phishing-as-a-service kit called Sneaky 2FA, sold for \$200 per month by a group known as Sneaky Log. The kit uses compromised infrastructure to host phishing pages and employs sophisticated techniques to evade detection.