Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

The Hacker News 25 August 2026, 14:56 EEST Security

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. According to ANY.RUN research, 48% of targeted email addresses were potentially compromised. Most of the affected companies are US-based. Mirage2FA Campaign…

Read the full story on The Hacker News https://thehackernews.com/2026/08/mirage2fa-surge-hits-4500-us-and-eu.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Hackers breached over 270 Zimbra servers in ongoing attacks BleepingComputer
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages The Hacker News
E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands The Hacker News
Frontier AI: Vulnerability Management's Systemic Revolution The Hacker News