BigBear 2.0 phishing service bypasses MFA at 258 orgs, steals 5,000+ M365 credentials

A phishing-as-a-service framework, BigBear 2.0, has successfully bypassed multi-factor authentication at 258 organizations, compromising over 5,000 Microsoft 365 accounts. The attack leverages adversary-in-the-middle techniques to intercept session tokens, undermining MFA protections. This highlights a growing trend of credential theft despite MFA deployment, posing significant risk to enterprise security.