Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Home / Tech / Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

August 25, 2026 dirk 0 Comments 3 tags

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication.

According to ANY.RUN research, 48% of targeted email addresses were potentially compromised. Most of the affected companies are US-based.

Mirage2FA Campaign

Source: The Hacker News

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 03.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 209 requests (recent log) 216.73.216.125 — 66 requests (recent log) 216.244.66.232 — 57 requests (recent

Attack Update: Top 5 Attack-IPs auf doode.info – 29.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 309 requests (recent log) 216.73.216.86 — 189 requests (recent log) 34.65.117.95 — 132 requests (recent

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch