AITM phishing attack against Enterprise Users

Zscaler ThreatLabz reports an active AitM phishing campaign (mid‑July 2022) targeting G Suite/Gmail enterprise users — primarily senior executives — that leverages multi-stage open-redirects, compromised intermediate redirectors, and client-side fingerprinting to evade analysis and intercept MFA; the report documents technical TTPs, infrastructure overlap with a prior Microsoft-targeting campaign, and provides phishing domains and compromised redirector IOCs.