Tag: BigBear

  • BigBear phishing service bypassed MFA at 258 organizations

    BigBear phishing service bypassed MFA at 258 organizations

    A phishing-as-a-service platform called BigBear 2.0 has compromised Microsoft 365 accounts at 258 organizations. The operation collected more than 5,000 credential records by intercepting passwords and authenticated session cookies. CloudSEK researchers gained administrator access to the service’s control panel. Their investigation uncovered 42 virtual private server nodes configured to target Microsoft 365 users. The BigBear…