MFA bypass

One AiTM phishing campaign compromised 35,000 users across 13,000 organisations in three days

Adversary-in-the-middle phishing now defeats standard MFA at industrial scale. Microsoft tracked a single April 2026 campaign spanning 26 countries in 72 hours.