BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials

September 4, 2026 · 9:08 pm 3 sources

Image: BleepingComputer

Coverage

Coverage

• BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
  BleepingComputer · September 7, 2026 15:39
  A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. [...]
• BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
  Infosecurity Magazine · September 8, 2026 09:45
  CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365

More coverage

• Microsoft built a prompt injection detector. Then it caught a phishing campaign instead.
  The New Stack · September 4, 2026 21:08
  Microsoft flagged a phishing campaign last week that exploits a gap in how machines read text. Attackers are slipping invisible The post Microsoft built a prompt injection detector. Then it caught a phishing campaign instead. appeared first on The New Stack .