thehackernews.com

Mirage2FA campaign hijacks Microsoft 365 sessions for thousands of firms

Microsoft logoMicrosoft
Sig4.10Sen-2.50Env0.00Soc-3.00Gov-2.60

The Mirage2FA campaign affected thousands of companies from 2024 to 2026, with ANY.RUN research finding 48% of targeted email addresses potentially compromised. Attackers stole passwords and session cookies to access authenticated Microsoft 365 sessions and SSO-connected services, exploiting AiTM gaps in authentication and session management even with 2FA. Defenses include revoking compromised sessions and tokens, sandbox-based investigation, and identity-focused incident response.

Coverage (1)

ABOUT

What is Fimmer?

Most feeds treat all company headlines the same. An executive interview, an office closure, stock analysis, and a data breach can sit side by side with no sense of scale. Fimmer ranks coverage by what matters, so important events stand out and signals are prioritised over noise. We cluster related company news and score each story using a range of metrics, so you see the most crucial stories first.

SCORING

What do the scores mean?

Significance (0–10) measures the scale of the real-world impact. Sentiment and ESG (−10 to +10) indicate the tone of the coverage and whether the change relates to environmental, social, or governance factors. Together, these scores help distinguish meaningful developments from routine company news. More information about our scoring methodology can be found on our About page.

DISCOVERY

Explore more on Fimmer

Search more than 10,000 public companies, browse the company index, explore their scores, and read the coverage behind them, with our core features available to everyone for free.

For more advanced features, Pro gives you access to dynamic feeds, custom sorting, and more ways to track the companies that matter to you.

More with Pro