How legitimate cloud platforms enable phishers to bypass MFA

Kaspersky Securelist reporting covers active and emerging cyber threats, including adversary-in-the-middle phishing that bypasses MFA through legitimate cloud platforms, targeted espionage campaigns using memory-resident backdoors and covert C2, ransomware and BitLocker extortion, supply-chain abuse, DNS tunneling, credential theft, and data exfiltration. Notable activity includes OctLurk and SilkLurk in Central Asia, Mirage Kitten tools targeting the Middle East and Africa, Project CAV3RN using Outlook and DNS AAAA records for C2, HelloNet abuse of ViPNet updates, GoSerpent operations inSout​