#abusing


Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Aug 25, 2026 // 14:58

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate […]

Cybercrime service disrupted for abusing Microsoft platform to sign malware

May 20, 2026 // 01:02

Microsoft says it has disrupted a malware-signing-as-a-service (MSaaS) operation that abused the company’s Artifact Signing service to generate fraudulent code-signing certificates used by ransomware gangs […]

Microsoft Discloses ClickFix Campaign Abusing Windows Terminal for Lumma Stealer Deployment

Mar 6, 2026 // 12:08

Microsoft Threat Intelligence revealed that the ClickFix social engineering campaign has evolved to use Windows Terminal as a primary vehicle for deploying the Lumma Stealer malware. This update marks a tactical […]