Mirage2FA campaign compromises 48% of targeted accounts across 4,500+ organizations

Security researchers identified a large-scale phishing campaign utilizing the Mirage2FA toolkit to bypass multi-factor authentication and harvest session cookies. The operation has impacted over 4,500 organizations, primarily in the US and EU, marking a significant escalation in automated credential theft capabilities.