New Bluekit Phishing-as-a-Service Bypasses MFA to Steal Microsoft Login Credentials

A sophisticated Phishing-as-a-Service (PhaaS) platform called Bluekit has been confirmed operational at scale, with cybersecurity firm Netcraft detecting approximately 70 live hostnames in a single week. First documented by Varonis Threat Labs as an emerging tool still in development, Bluekit has since matured into a fully operational threat capable of bypassing multi-factor authentication (MFA) and […] The post New Bluekit Phishing-as-a-Service Bypasses MFA to Steal Microsoft Login Credentials appeared first on Cyber Security News.