AiTM

Payroll Pirate Phishing: When Search Ads Lead to Stolen Salaries

A recent payroll-diversion campaign against Canadian employees shows how poisoned search results, adversary-in-the-middle phishing, hidden inbox rules, and HR workflow abuse can turn one login into a stolen paycheck.

Tycoon2FA Is Down. The Session-Theft Problem Is Not

The March 2026 disruption of Tycoon2FA was important, but the bigger takeaway is what the platform proved: session theft and MFA bypass are now available as a subscription service. That changes the scale and economics of enterprise phishing.

Understanding Browser-in-the-Middle vs Attacker-in-the-Middle

Traditional phishing was simple: send a fake login page, steal a password, log in. Multi-factor authentication (MFA) made that much harder… so attackers evolved. Modern attackers are increasingly using Adversary-in-the-Middle (AiTM) and Browser-in-the-Middle (BitM) techniques.

Executing Adversary-in-the-Middle (AiTM) in Okta-Flows: And How Secto Stops It

In today's enterprise identity architecture, Okta often acts as the identity provider (IdP) for Microsoft Entra ID federated sign-ins.

Adversary-in-the-Middle (AiTM): The MFA Bypass Threat Every Org Must Understand

Imagine your CEO receives a perfectly legitimate Microsoft 365 login page. Everything looks normal. They enter their credentials, complete the MFA prompt, and continue with their day.