A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. [...]
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
Summary + source link. No paywalls, no tracking.