Critical M365 Security Alert
A sophisticated phishing-as-a-service platform known as BigBear 2.0 has successfully compromised 258 organizations, highlighting a significant escalation in credential theft tactics. The service specializes in bypassing Multi-Factor Authentication (MFA) to harvest sensitive Microsoft 365 account data.
What You Need to Know
- MFA Bypass: Attackers are using adversary-in-the-middle (AitM) techniques to intercept authentication tokens, rendering standard MFA prompts ineffective.
- Vishing Risks: Cybercriminals are increasingly augmenting these digital attacks with 'help desk' vishing calls to trick employees into providing verification codes.
- Actionable Advice: Ensure your staff is trained to verify the identity of anyone calling from 'IT support.'
Small business owners should audit their Microsoft 365 logs for unusual sign-in locations and enforce hardware-backed security keys where possible to counter token theft.