👩‍💻 Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users

Datadog identified an active adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users. The campaign uses lookalike domains, proxies legitimate authentication pages, injects JavaScript to steal credentials and session tokens, and can bypass non-phishing-resistant MFA.

https://securitylabs.datadoghq.com/articles/investigating-an-aitm-phishing-campaign-m365-okta/

#azure