bleeping-computer Jul 14, 2026 · Crawled Jul 14, 2026

New phishing kits target Microsoft 365 accounts, evade MFA

1 Actors

AI Summary

Two new phishing kits, Jalisco and OmegaLord, are targeting Microsoft 365 accounts using techniques that bypass multi-factor authentication (MFA). Jalisco leverages device-code phishing via OAuth 2.0 Device Authorization Grant, tricking users into authorizing attacker-controlled devices. OmegaLord uses a fake PDF reader login page to harvest credentials and phone numbers, aiding in MFA bypass. Both kits enable rapid data exfiltration from SaaS platforms like SharePoint, often within minutes of compromise.

AI-extracted · verify before operational use

Extracted Entities 1 found

Threat Actor TIDRONE →

MITRE ATT&CK TTPs 5 techniques

T1059 Command and Scripting Interpreter · Execution T1078 Valid Accounts · Defense Evasion T1090 Proxy · Command And Control T1195.001 Compromise Software Dependencies and Development Tools · Initial Access T1555 Credentials from Password Stores · Credential Access