Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
MFA BypassMirage2FA Phishing Toolkit Hijacks 4,500 Microsoft 365 Sessions via AiTM
Mirage2FA is an active phishing-as-a-service toolkit that hijacks Microsoft 365 sessions via Adversary-in-the-Middle, bypassing MFA to steal credentials, 2FA codes, and session cookies from 4,500+ US and EU organizations.
ShinyHunters Bypasses MFA With Salesforce OAuth Playbook
Cato Networks publishes a 2026 threat-actor profile for ShinyHunters, detailing its MFA-bypass playbook (help-desk vishing + malicious Salesforce connected app + OAuth token) and the UNC6040 campaign that targets Salesforce, Salesloft Drift, and Gainsight integrations.
