Skip to main content
← All Articles

Tag

#AitM

12 articles

Advertisement

MEDIUM
Threat Intel

Dismantling Kratos: Law Enforcement Disrupts Phishing-as-a-Service Hub

Law enforcement agencies dismantle the Kratos PhaaS platform, arresting its developer and disrupting infrastructure used for high-scale session cookie theft.

Runtime Rebel Intel
3 min read · Jul 22, 2026
Forg365 PhaaS: Bypassing MFA in Microsoft 365 via AitM Attacks
MEDIUM
Threat Intel

Forg365 PhaaS: Bypassing MFA in Microsoft 365 via AitM Attacks

Forg365 PhaaS enables attackers to compromise Microsoft 365 accounts using AI-assisted lures and device code phishing to bypass multi-factor authentication.

Runtime Rebel Intel
3 min read · Jul 13, 2026
Evilginx Operations Exposed: Misconfigured Server Leaks M365 Phishing Kits
HIGH
Threat Intel

Evilginx Operations Exposed: Misconfigured Server Leaks M365 Phishing Kits

A misconfigured Python server exposed three live Evilginx phishing operations targeting Microsoft 365, revealing the attacker's toolkit and session cookies.

Runtime Rebel Intel
4 min read · Jul 13, 2026
HIGH
Threat Intel

Forg365 PhaaS Leverages AI, AiTM for Microsoft 365 Account Compromise

Forg365 PhaaS targets Microsoft 365 with AI-assisted AiTM and device code phishing.

Runtime Rebel Intel
4 min read · Jul 9, 2026
HIGH
Threat Intel

BlackFile: Analyzing UNC6671 Vishing & Cloud Data Extortion

Examines UNC6671's BlackFile vishing, AiTM, and cloud data exfiltration tactics against Microsoft 365 & Okta. Actionable mitigations included.

Runtime Rebel Intel
6 min read · May 15, 2026
MEDIUM
Threat Intel

AitM Phishing Attacks Target US Organizations with Conduct Reports

Microsoft warns of a sophisticated AitM phishing campaign using fake conduct reports to bypass MFA and hijack Microsoft 365 user sessions.

Runtime Rebel Intel
3 min read · May 5, 2026

Advertisement

MEDIUM
Threat Intel

Tycoon 2FA Market Shift: Fragmentation and the Rise of Dadsec

Analysis of Tycoon 2FA's declining market share as threat actors reuse its technical artifacts in Dadsec and other phishing-as-a-service platforms.

Runtime Rebel Intel
4 min read · Apr 18, 2026
AitM Phishing Campaign Targets TikTok Business via Turnstile Evasion
MEDIUM
Threat Intel

AitM Phishing Campaign Targets TikTok Business via Turnstile Evasion

Security researchers have identified a sophisticated AitM phishing campaign using Cloudflare Turnstile to hijack TikTok for Business accounts for malvertising.

Runtime Rebel Intel
4 min read · Mar 27, 2026
HIGH
Threat Intel

Tycoon 2FA PaaS Recovery: Detecting AitM Phishing Infrastructure

Tycoon 2FA Phishing-as-a-Service has recovered from law enforcement disruption. Learn how this AitM platform bypasses MFA and how to protect your organization.

Runtime Rebel Intel
3 min read · Mar 23, 2026
Tycoon 2FA PhaaS Infrastructure Dismantled in Europol-Led Operation
MEDIUM
Threat Intel

Tycoon 2FA PhaaS Infrastructure Dismantled in Europol-Led Operation

Europol and global law enforcement dismantle Tycoon 2FA, a Phishing-as-a-Service kit used in 64,000 attacks to bypass MFA via AitM techniques.

Runtime Rebel Intel
3 min read · Mar 5, 2026
MEDIUM
Threat Intel

Tycoon 2FA PhaaS Platform Dismantled in Global Law Enforcement Takedown

International law enforcement dismantled Tycoon 2FA, a Phishing-as-a-Service platform used to bypass MFA and target 500,000 organizations monthly.

Runtime Rebel Intel
3 min read · Mar 4, 2026
HIGH
Threat Intel

Starkiller Phishing-as-a-Service: Technical Analysis of Adversary-in-the-Middle Frameworks

An examination of the Starkiller phishing platform, which employs transparent reverse proxy techniques to relay authentication traffic and capture multi-factor…

Runtime Rebel Intel
2 min read · Feb 23, 2026