Threats Tagged 'websocket'
View all threats tagged with 'websocket'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'websocket'
Click on any threat for detailed analysis and mitigation recommendations
Mirage2FA Hijacks Companies’ Microsoft 365 Sessions, with Over 4K Victims in the US 0 Mirage2FA is an active phishing-as-a-service toolkit built to steal Microsoft 365 credentials and authenticated sessions through Adversary-in-the-Middle attacks. Analysis shows 63.7% of identified victims are in the US, with Technology, Manufacturing, and Education among the most targeted industries. The operation generated thousands of compromise events between 2024 and 2026, including stolen session cookies, passwords, and SSO access. Once a Microsoft 365 session is hijacked, attackers gain access to corporate email, sensitive data, and trusted business accounts. The toolkit uses browser-based delivery through .htm, .xhtml, and .svg stagers, QR codes, JavaScript obfuscation, and WebSocket-based AiTM activity. Of 9,426 unique targeted email addresses, 4,532 were potentially compromised, representing approximately 48% success rate. MediumCampaign Join the discussion United States British Indian Ocean Territory Canada+4#microsoft 365#websocket#adversary-in-the-middle | AlienVault OTX General | 08/18/2026, 20:48:20 UTC Added: 08/19/2026, 10:04:41 UTC |
Showing 1 to 1 of 1 result