How legitimate cloud platforms enable phishers to bypass MFA

Kaspersky Securelist threat-intelligence feed covering recent phishing, MFA-bypass, cyber-espionage, ransomware, extortion, backdoor, tunneling, credential theft, data exfiltration, and targeted intrusion activity. Notable reporting includes AiTM phishing hosted on legitimate cloud platforms, tailored memory-resident backdoors targeting Central Asia, GenieLocker ransomware affecting Windows/Linux/ESXi, Mirage Kitten tooling in the Middle East and Africa, BitLocker-based extortion, Outlook Graph and DNS-based C2, malicious ViPNet update delivery, and GoSerpent campaigns against Southeast Asian