How legitimate cloud platforms enable phishers to bypass MFA
2026-08-10T08:51:47Z•a00221bdc8c21b9efd746c65cd60a1cc5159b419f457e7084973a3a995c4ecb5
BitLocker extortionCloudflare WorkersDNS tunneling/configuration recovery using AAAA recordsGenieLockerGitHub PagesIPFSMFA bypassMSSQLMicrosoft GraphNetlifyOutlook C2RDPRMMVerceladversary-in-the-middlebackdoorscloud abusecredential dumpingcyber-espionagekeyloggingmemory injectionphishingransomwareservice workersweb shells
What happened
Kaspersky Securelist feed covering recent threat research, including adversary-in-the-middle phishing that bypasses MFA through legitimate cloud hosting, cyber-espionage backdoors and tunneling tools, ransomware and BitLocker extortion, abuse of trusted software update systems, C2 over Outlook and DNS, and data theft campaigns targeting educational, government, and regional organizations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- kaspersky_securelist
- Record identifier
- a00221bdc8c21b9efd746c65cd60a1cc5159b419f457e7084973a3a995c4ecb5
- Enrichment time
- 2026-08-10T08:51:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.