CTI Report: BRG-26182 Chains a Fake Human-Check to Microsoft 365 AiTM Session Theft

BRG-26182 is an active phishing campaign that uses a fake human-verification page on compromised websites to funnel victims into a sophisticated Adversary-in-the-Middle kit, enabling real-time theft of Microsoft 365 credentials and session cookies—even bypassing MFA—for full account takeover.