Mirage2FA Surge Hits 4500 US and EU Companies Abusing Microsoft 365 Login Flows

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026 The commercial phishingasaservice toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing twofactor authentication According to ANYRUN research 48 of targeted email addresses were potentially compromised Most of the affected companies are USbased Mirage2FA Campaign