New PhaaS Platform Rockstar 2FA Exposes Microsoft 365 MFA Vulnerabilities

A new phishing-as-a-service platform called Rockstar 2FA has emerged as a potent tool for adversary-in-the-middle (AiTM) attacks, specifically targeting Microsoft 365 accounts.  By intercepting session cookies, the platform allows attackers to bypass multifactor authentication (MFA) protections, granting them direct access to user accounts. Rockstar 2FA Threat and Evolution of Phishing Kits The phishing mechanism involves […]

The post New PhaaS Platform Rockstar 2FA Exposes Microsoft 365 MFA Vulnerabilities appeared first on Techopedia.