An AI-powered phishing campaign has compromised hundreds of organizations

Huntress researchers attribute a large-scale phishing campaign to abuse of Railway's cloud hosting and AI-generated bespoke lures to harvest credentials and obtain long-lived Microsoft OAuth tokens for devices, compromising hundreds of organizations across multiple sectors (344 victims detailed) and potentially thousands more; Railway blocked identified accounts and Huntress applied conditional access mitigations.