BigBear Phishing Crew Nets Thousands of Microsoft 365 Credentials
A phishing operation called BigBear 2.0 has been targeting Microsoft 365 users, capturing thousands of passwords and session cookies.
Researchers at CloudSEK gained access to the crooks' admin panel and found 5,137 stolen records tied to 461 organizations.
The stolen credentials can be used for business email compromise, data theft, or sold on to other criminals.