The Procurement Trap: Inside an AiTM Campaign Targeting Global Institutions

A sophisticated adversary-in-the-middle phishing campaign is exploiting compromised, aged domains and advanced phishing kits to hijack MFA-protected sessions at global institutions, proving that even strong authentication can be bypassed when attackers steal trusted, authenticated sessions in real time.