Attackers Use EvilProxy to target C-suite Executives

Phishing Kit Primarily Used in Attacks Against Employees of Fortune 500 Companies
Threat actors are taking control of cloud-based Microsoft 365 accounts of C-suite executives using a multi-factor authentication phishing tool. Proofpoint researchers say attackers use automation to identify in real-time whether a phished user is a high-level profile company official.

accounts attackers attacks authentication automation cloud cloud-based control c-suite employees evilproxy executives factor high identify kit microsoft microsoft 365 multi-factor multi-factor authentication official phished phishing phishing kit profile proofpoint researchers target tool