Takeovers of MFA-protected accounts increase, as Microsoft 365 phishing campaign shows – CSO Online

The new phishing campaign targets business executives and uses EvilProxy to defeat multifactor authentication. A Microsoft 365 phishing campaign has targeted over 100 companies since March and successfully compromised accounts belonging to senior business executives. The attackers used EvilProxy, a…







