Threat actors are using the EvilProxy phishing platform to get around multi-factor authentication (MFA) protections in the Microsoft 365 accounts of high-level corporate executives in a sprawling campaign that highlights the growing popularity among cybercriminals of advanced phishing-as-a-service (PhaaS) kits. Since March, more than 100 organizations with a combined 1.5 million employees have been targeted..