BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
CloudSEK researchers found the BigBear 2.0 PhaaS kit, built on Evilginx2, has stolen over 5,100 Microsoft 365 credentials across 461 organizations in 40+ countries.
70
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 20, 2026
- Last mentionedSep 8, 2026
Timeline
2 articles · newest firstCybersecurity jobs available right now: June 30, 2026
Help Net Security lists cybersecurity job openings across the US, UAE, France, Israel, Japan, Ireland, India, and Canada at major employers.
12
Appears with
- Protonvendor · 1
- Help Net Securityorganization · 1
- CloudSEKvendor · 1
- Evilginx2malware · 1
- Synchronyvendor · 1
- IT service providersvictim · 1
- Interactive Brokersorganization · 1
- General Bossthreat actor · 1
- Saronic Technologiesorganization · 1
- Microsoft 365product · 1
- Cyeorganization · 1
- Lumafieldvendor · 1
- Spotifyvendor · 1
- Veoliaorganization · 1
- Microsoftvendor · 1
- Managed service providersvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.