https://cyberpress.org/mirage2fa-the-phishing-service-turning-a-stolen-microsoft-365-cookie-into-full-account-takeover/
Mirage2FA scales cookie-theft phishing against Microsoft 365 Mirage2FA , a phishing-as-a-service kit tied to LinX Coders, uses an adversary-in-the-middle flow to capture live Microsoft 365 session cookies after victims enter credentials and 2FA codes. ANY.RUN links it to 9,332 compromise events across 94 countries, including 4,532 potentially compromised accounts at 3