Sophisticated VoidProxy Service Bypasses MFA to Steal Microsoft 365 and Google Credentials in Real-Time

Okta researchers have discovered VoidProxy, a sophisticated phishing-as-a-service platform targeting Microsoft 365 and Google accounts through adversary-in-the-middle attacks. The platform uses compromised email accounts to send phishing messages with shortened links leading to fake login ...