'SessionShark' ToolKit Evades Microsoft Office 365 MFA
ID: 3e8009cc-57db-522a-b0d2-ce3fd235c52c
STIX ID: report--3e8009cc-57db-522a-b0d2-ce3fd235c52c
Feed Name: Dark Reading
Threat Score
Date Published: 2025-04-24
Date Updated: 2026-04-21
Author: Kristina Beek, Associate Editor, Dark Reading
...
...
Security researchers identified "SessionShark 0365 2FA/MFA," a phishing-as-a-service (PhaaS) toolkit that uses an adversary-in-the-middle approach to steal Office 365 session cookies and bypass MFA; the kit advertises anti-detection features, Cloudflare compatibility, and customer support, and is marketed on cybercrime forums under a thin veneer of "ethical" or "educational" use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.