[Evidence Only] O365 MFA Bypass Phishing Campaign

VirusTotal Collection: 

Attachment Hash: 6c18735f665c91ea9101b4cf092ed57f9012db7b2ab7c65e96d922e47c47607f
Email Hash: 59a30cf63baf07ca0ed8d4ef7524541e2562249fa13e8233dcafbe209702b664

login-m.livedocportal.com
autologon.livedocportal.com
live.livedocportal.com
l0g1n-micr0s.livedocportal.com

IPs hidden behind cloudflare proxy
104.26.10.42
104.26.11.42
172.67.68.127

























Comments