Threat Actors Turn to AiTM to Bypass MFA

Threat actors have started moving away from authenticating via legacy protocols to bypass multifactor authentication (MFA) in Microsoft 365, according to an Expel report on cybersecurity trends. Instead, malicious actors are adopting frameworks such as Evilginx2 to facilitate adversary-in-the-middle (AiTM) phishing attacks to steal login credentials and session cookies for initial access and MFA bypass...

The post Threat Actors Turn to AiTM to Bypass MFA appeared first on Security Boulevard.

2fa phishing access adversary adversary-in-the-middle aitm attacks authentication bec business email compromise bypass cookies credentials cybersecurity cybersecurity trends expel frameworks initial access legacy login login credentials malicious malicious actors mfa microsoft microsoft 365 moving multifactor multifactor authentication phishing phishing attacks protocols report security security boulevard session steal threat threat actors trends turn