Threat Intelligence Report

Sneaky 2FA Returns: Trusted Sender Abuse, Route Polymorphism, and Microsoft 365 Replay Against Enterprise IT

📅 July 13, 2026 📰 zerobec.com 🔍 0 CVE(s) referenced

A highly adaptive phishing campaign targeting enterprise IT abused trusted SaaS sender accounts and advanced, session-polymorphic Sneaky 2FA kits to bypass traditional defenses, dynamically emulate tenant-branded Microsoft 365 authentication flows, and replay stolen credentials in near real time against Microsoft Entra ID.

unclassified

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle