A new phishing service called Mamba 2FA is being used by cybercriminals to target Microsoft 365 accounts. It works by creating convincing fake login pages to trick users and steal their account information, even when multi-factor authentication (MFA) is in place. This type of attack is called “adversary-in-the-middle” (AiTM), where attackers capture a victim’s login […]