How legitimate cloud platforms enable phishers to bypass MFA

Kaspersky Securelist reporting covers contemporary phishing, MFA bypass, cyber-espionage, ransomware, and targeted intrusion activity. Highlights include adversary-in-the-middle phishing hosted on legitimate cloud platforms, memory-resident backdoors targeting Central Asia, GenieLocker ransomware affecting Windows/Linux/ESXi, Mirage Kitten tools targeting the Middle East and Africa, BitLocker-based extortion, Outlook/Microsoft Graph and DNS-based C2, supply-chain abuse of the ViPNet update system, and data theft campaigns against Southeast Asian government entities.