NEW SESSIONSHARK PHISHING KIT BYPASSES MFA TO STEAL OFFICE 365 LOGINS

Summary from the TLDR InfoSec newsletter

SessionShark is a phishing kit that facilitates the theft of Office 365 credentials by circumventing multi-factor authentication through deceptive login pages and real-time notifications via Telegram.