Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials
A phishing kit called Mirage2FA has been identified, using a combination of short-lived HTML smuggling and obfuscated JavaScript loaders to deliver fake Microsoft 365 login pages and steal credentials
