SecurityBleepingComputerabout 2 hours ago
New phishing kits target Microsoft 365 MFA
1 min read
Two phishing kits, Jalisco and OmegaLord, target Microsoft 365 accounts and bypass multi-factor authentication. Jalisco uses device-code phishing to authorize attacker-controlled devices. OmegaLord masquerades as a PDF reader to steal credentials and phone numbers. ReliaQuest analyzed both toolkits and recommends reducing Entra ID device-registration limits.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
