New Rockstar 2FA phishing service targets Microsoft 365 accounts

**Rockstar 2FA** is a phishing-as-a-service platform that enables adversary-in-the-middle (AiTM) attacks to bypass Microsoft 365 multifactor authentication by proxying logins and harvesting session cookies; researchers observed the service selling access, automating phishing campaigns across 5,000+ domains, using Cloudflare Turnstile and decoys to evade detection, and distributing lures via legitimate marketing platforms and compromised accounts.