Cybersecurity articles tagged #PhaaS on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/jwr-phishing-framework-real-time-data-theft-via-phaashttps://runtimerebel.com/blog/jwr-phishing-framework-real-time-data-theft-via-phaasThe JWR phishing framework, a variant of The Outsider PhaaS, harvests payment data, PII, and 2FA codes in real-time via operator-controlled sessions.Thu, 13 Aug 2026 16:47:48 GMTPhishingPhaaSCredential TheftPIIJWRhttps://runtimerebel.com/blog/greatness-phaas-adds-device-code-phishing-for-mfa-bypasshttps://runtimerebel.com/blog/greatness-phaas-adds-device-code-phishing-for-mfa-bypassGreatness PhaaS now supports device code phishing, abusing OAuth 2.0 to bypass MFA and seize accounts on Microsoft 365, Google Workspace, and more.Tue, 04 Aug 2026 17:30:11 GMTPhaaSMFA BypassOAuth 2 0Microsoft 365Greatnesshttps://runtimerebel.com/blog/forg365-phaas-bypassing-mfa-in-microsoft-365-via-aitm-attackshttps://runtimerebel.com/blog/forg365-phaas-bypassing-mfa-in-microsoft-365-via-aitm-attacksForg365 PhaaS enables attackers to compromise Microsoft 365 accounts using AI-assisted lures and device code phishing to bypass multi-factor authentication.Mon, 13 Jul 2026 14:38:14 GMTForg365Microsoft 365PhaaSAitMDevice Code Phishinghttps://runtimerebel.com/blog/forg365-phaas-leverages-ai-aitm-for-microsoft-365-account-compromisehttps://runtimerebel.com/blog/forg365-phaas-leverages-ai-aitm-for-microsoft-365-account-compromiseForg365 PhaaS targets Microsoft 365 with AI-assisted AiTM and device code phishing.Thu, 09 Jul 2026 15:14:50 GMTForg365Phishing as a ServicePhaaSMicrosoft 365AitMAI PhishingDevice Code Phishinghttps://runtimerebel.com/blog/artoken-phaas-exposes-eviltokens-m365-phishing-toolkithttps://runtimerebel.com/blog/artoken-phaas-exposes-eviltokens-m365-phishing-toolkitARToken PhaaS, an affiliate of EvilTokens, offers advanced Microsoft 365 phishing capabilities, including MFA bypass. Learn about its TTPs and how to defend.Fri, 03 Jul 2026 17:28:05 GMTARTokenEvilTokensPhaaSPhishingMicrosoft 365MFA BypassCredential HarvestingThreat Intelligencehttps://runtimerebel.com/blog/chinese-smishing-network-outsider-leverages-gemini-ai-for-phishinghttps://runtimerebel.com/blog/chinese-smishing-network-outsider-leverages-gemini-ai-for-phishingGoogle sues a Chinese smishing network operating 'Outsider' PhaaS, accused of using Gemini AI to craft sophisticated phishing messages targeting Americans.Fri, 12 Jun 2026 20:51:49 GMTSmishingPhishing as a ServicePhaaSOutsiderGemini AIGoogleCybercrime NetworkChinaSocial Engineeringhttps://runtimerebel.com/blog/fbi-warns-of-kali365-phaas-targeting-microsoft-365-accountshttps://runtimerebel.com/blog/fbi-warns-of-kali365-phaas-targeting-microsoft-365-accountsThe FBI issues an advisory on Kali365, a Phishing-as-a-Service platform exploiting OAuth device code flows to bypass MFA and hijack Microsoft 365 accounts.Mon, 25 May 2026 13:18:04 GMTKali365Microsoft 365PhaaSOauth AbuseMFA Bypasshttps://runtimerebel.com/blog/chinese-language-phaas-real-time-otp-interception-and-tokenizationhttps://runtimerebel.com/blog/chinese-language-phaas-real-time-otp-interception-and-tokenizationChinese-language PhaaS providers like Darcula are shifting to real-time OTP interception and digital wallet tokenization to bypass modern MFA controls.Mon, 25 May 2026 05:38:17 GMTPhaaSUNC5814DarculaMFA BypassTokenizationYY Lai Yuhttps://runtimerebel.com/blog/eviltokens-phaas-bypassing-mfa-via-oauth-device-code-flowhttps://runtimerebel.com/blog/eviltokens-phaas-bypassing-mfa-via-oauth-device-code-flowThe EvilTokens platform has compromised 340+ Microsoft 365 organizations by weaponizing OAuth Device Code Flows to bypass multi-factor authentication.Tue, 19 May 2026 13:15:26 GMTEvilTokensMicrosoft 365Oauth PhishingDevice Code FlowPhaaShttps://runtimerebel.com/blog/venom-phaas-new-phishing-attacks-target-senior-executives-microsoft-loginshttps://runtimerebel.com/blog/venom-phaas-new-phishing-attacks-target-senior-executives-microsoft-loginsAnalysis of VENOM, a new PhaaS platform targeting C-suite executives with sophisticated phishing attacks to steal Microsoft login credentials across industries.Fri, 10 Apr 2026 05:03:44 GMTVENOMPhishing as a ServicePhaaSCredential TheftMicrosoft LoginsC SuiteExecutive Phishinghttps://runtimerebel.com/blog/starkiller-phishing-as-a-service-technical-analysis-of-adversary-in-the-middle-frameworkshttps://runtimerebel.com/blog/starkiller-phishing-as-a-service-technical-analysis-of-adversary-in-the-middle-frameworksAn examination of the Starkiller phishing platform, which employs transparent reverse proxy techniques to relay authentication traffic and capture multi-factor…Mon, 23 Feb 2026 08:20:40 GMTPhishingMFA BypassAitMPhaaSCredential Theft