> TritonInfoSec News
Home / Aug 26, 2026 / Story
0
#4 The Hacker News general August 25, 2026 at 11:56 UTC

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

By [email protected] (The Hacker News)

AI Summary

The Mirage2FA phishing-as-a-service toolkit has targeted 4,500 US and EU companies between 2024 and 2026, abusing legitimate Microsoft 365 login flows to bypass two-factor authentication, with ANY.RUN research indicating 48% of targeted email addresses were potentially compromised. The campaign's multi-year persistence and scale make it a significant threat to enterprise Microsoft 365 deployments.

Read full article → https://thehackernews.com/2026/08/mirage2fa-surge-…

Relevance score: 82.0/100

# More from August 26

  1. 1
    Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data The Hacker News
  2. 2
    Hackers breached over 270 Zimbra servers in ongoing attacks BleepingComputer
  3. 3
    Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access The Hacker News
  4. 5
    A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw The Hacker News
  5. 6
    Police arrests dozens of suspects in global cybercrime crackdown BleepingComputer
  6. 7
    US sanctions Iranian cyber actors as UK discloses power plant attack The Record
  7. 8
    AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes BleepingComputer
  8. 9
    ToxicPanda Banking Trojan Matures into Enterprise Threat Dark Reading
  9. 10
    TikTok reaches $400M settlement with US over COPPA violations BleepingComputer