Hackers Hijack Microsoft 365 Sessions and Replace Victims’ MFA Methods to Maintain Access

Hackers hijacked Microsoft 365 sessions across 79 organizations, replacing victims’ multifactor authentication methods and registering rogue devices to maintain access. Huntress tracked the campaign between July 14 and September 22, 2026, recording 497 successful sign-ins and more than 200,000 failed login attempts tied to the attackers’... Weiterlesen: Hackers Hijack Microsoft 365 Sessions and Replace Victims’ MFA Method…