BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

Bill Toulas reports A phishingasaservice framework called BigBear 20 has been used to bypass multifactor authentication at 258 organizations and steal more than 5000 Microsoft 365 credentials Researchers at cybersecurity company CloudSEK gained administrator access to the control panel and found that the service managed 42 VPS nodes all configured to target Microsoft 365 as Source