Microsoft seizes websites tied to Egypt-based DIY phishing kit-maker

Microsoft seized 240 websites linked to an Egypt-based operator known as MRxC0DER who sold ONNX phishing kits that perform adversary-in-the-middle (AiTM) attacks to bypass multifactor authentication; the kits have been used to target Microsoft 365 users and financial services, and researchers warn the service represents a sophisticated phishing-as-a-service threat even though domain seizures can only temporarily disrupt the operation.