Microsoft Office 365 MFA targeted by ‘SessionShark’ phishing kit – Go Health Pro

Microsoft Office 365 MFA targeted by ‘SessionShark’ phishing kit – Go Health Pro

A new phishing-as-a-service (PhaaS) kit known as “SessionShark” targets Microsoft Office 365 accounts and claims to enable multi-factor authentication (MFA) bypass while evading common detection methods, SlashNext reported in a blog post Thursday.SessionShark allegedly serves as an adversary-in-the-middle (AiTM) tool that intercepts login credentials and user session tokens, the latter of which can be used … Read more