HACKERS SPOOF MICROSOFT ADFS LOGIN PAGES TO STEAL CREDENTIALS

Summary from the TLDR InfoSec newsletter

Abnormal Security has detected a new phishing campaign targeting education, healthcare, and government organizations' ADFS. The attackers send emails to targets, impersonating their company's IT team, with a request that they sign in to accept new policies or other routine changes, steal the login credentials and MFA, and then redirect the victims to the login page.