As cited
Copy frozen at (site build).
threat intel
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
A phishing-as-a-service campaign called Mirage2FA has targeted approximately 4,500 companies in the US and EU from 2024 to 2026, exploiting Microsoft 365 login flows to bypass two-factor authentication. Research indicates that nearly half of the targeted email addresses may have been compromised. Most affected organizations are based in the US.
Why it matters: Microsoft 365 users in US and EU organizations face credential theft and account takeover risk; verify for signs of Mirage2FA abuse in login flows.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
A phishing-as-a-service campaign called Mirage2FA has targeted approximately 4,500 companies in the US and EU from 2024 to 2026, exploiting Microsoft 365 login flows to bypass two-factor authentication. Research indicates that nearly half of the targeted email addresses may have been compromised. Most affected organizations are based in the US.
Why it matters: Microsoft 365 users in US and EU organizations face credential theft and account takeover risk; verify for signs of Mirage2FA abuse in login flows.
- Source published
- First seen by Cybersecurity Tracker