A global Microsoft 365 phishing operation dubbed BigBear 2.0 has exposed 5,137 credential records across 461 organisations, including 4,148 session cookies, 1,032 plaintext passwords, and 474 completed MFA-bypassed authentications.
The BigBear 2.0 campaign affected 3,331 unique victim IPs across more than 40 countries, with India, France, Saudi Arabia, New Zealand and ...