BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
CloudSEK researchers found the BigBear 2.0 PhaaS kit, built on Evilginx2, has stolen over 5,100 Microsoft 365 credentials across 461 organizations in 40+ countries.
70
Malware
Evilginx2
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 8, 2026
- Last mentionedSep 8, 2026
Timeline
1 articles · newest firstAppears with
- Microsoftvendor · 1
- CloudSEKvendor · 1
- IT service providersvictim · 1
- Managed service providersvictim · 1
- BigBear 2.0malware · 1
- General Bossthreat actor · 1
- Azure ADproduct · 1
- Microsoft 365product · 1
- Vultrvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.