BlobPhish Attack Steals Microsoft 365 Credentials

BlobPhish Attack Steals Microsoft 365 Credentials

A sophisticated, memory-resident phishing campaign called BlobPhish, active since October 2024, that exploits browser Blob URL APIs to silently steal credentials from Microsoft 365 users, major U.S. banks, and financial platforms while remaining almost completely...