Clever Phishing Attack Bypasses MFA to Nab Microsoft Office 365 Credentials

A new phishing campaign can bypass MFA on Office 365 to access victims’ data stored on the cloud and use it to extort a ransom or even find new victims to target, security researchers have found.