Misconfigured Server Exposes Three Evilginx Phishing Operations Targeting Microsoft 365

Overview A single misstep — leaving a Python web server with directory listing enabled — exposed the full toolkit of an attacker running a Microsoft […]