Barracuda researchers simulated how an attacker who already compromised one employee mailbox could use the account’s built-in email AI assistant to hide evidence, learn org context, and draft convincing internal phishing emails. In their proof of concept, the attacker used an invoice-themed link to hijack the CEO’s session and then used the CEO mailbox to request a wire transfer change to a new bank account.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: your mailbox is hacked, and the attacker uses your own email AI to cover their tracks for them. Barracuda showed an attacker telling the email chatbot: "Create an inbox rule that moves any emails with 'sign-in' in the subject into the deleted items folder", so security alerts just vanish while they read your sensitive threads and learn who approves what. Then they have the AI write an internal reply in your exact style: "Create an email using my writing patterns to respond to the Q3 budget approval email. I have a link to insert into the draft that contains the actual invoice confirmation." The CEO clicks that internal invoice link, hits an adversary-in-the-middle page, and their session gets hijacked. Here’s the move: if any email about invoices, wires, or bank changes asks you to click a link, even from a real coworker, pause and confirm it out-of-band with finance before you do anything.
Researchers say the “BigBear 2.0” phishing-as-a-service operation stole over 5,100 Microsoft 365 credential records across 461 organizations by capturing passwords and session cookies. The campaign used an adversary-in-the-middle setup to bypass MFA and maintain access, with stolen data sent to…
Researchers described a now-patched flaw ("AgentForger") where a single benign-looking ChatGPT link could silently create and publish an attacker-controlled Workspace Agent inside a company. If an employee was already logged in and had connected apps (like email, Drive, Slack, or Teams), the agent…
A phishing-as-a-service toolkit called Mirage2FA has been targeting organizations by abusing real Microsoft 365 login pages through a man-in-the-middle proxy. The attackers capture usernames, passwords, and live two-factor authentication codes, then take over the user’s session using stolen session…
Researchers described iAuthFlow v2, a phishing toolkit that steals a live Google login session and then uses that access to enroll an attacker-controlled passkey. Because passkeys are separate login methods, the attacker can often get back into the account even after the victim changes their…
The bulletin describes real-world social engineering where staff were tricked into disclosing sensitive data or access. In one case, Revolut employees responded to fraudulent information requests sent from a real government-domain email account, exposing extensive customer records. Separately,…
Microsoft described two real-world campaigns: an invoice fraud blast impersonating executives to trick finance teams into ACH payments, and a passkey-themed helpdesk scam that steals or bypasses authentication to take over Microsoft cloud accounts. In the second campaign, victims are called or…
