https://legacymfa.sucks/1.0daily https://legacymfa.sucks/posts/2021-01-21-wmed-phishing-took-one-employee-mailbox.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-02-05-oldsmar-scada-shared-remote-password-no-2fa.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-03-01-uc-san-diego-health-employee-email-phishing.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-04-20-chkd-employee-email-phishing-exposed-patient-phi.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-05-07-colonial-pipeline-darkside-legacy-vpn-no-mfa.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-06-10-ea-helpdesk-mfa-tokens-after-slack-cookie-foothold.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-07-28-mon-health-phishing-email-takeover-enabled-bec.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-08-26-luminis-health-employee-email-phishing-breach.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-09-13-weill-cornell-employee-email-phishing-exposed-phi.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-10-01-university-duo-otp-phishing-harvested-sms-codes.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-11-03-robinhood-support-employee-phone-vishing-breach.html2026-09-210.8monthly https://legacymfa.sucks/posts/2021-12-01-healthplex-o365-phishing-mfa-off-on-owa.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-01-21-lapsus-rdped-okta-sitel-support-engineer-pc.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-02-23-nvidia-lapsus-stole-employee-passwords-ntlm-hashes.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-03-22-lapsus-hit-one-microsoft-employee-account.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-04-04-mailchimp-social-engineering-stole-employee-credentials.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-05-24-cisco-mfa-fatigue-vishing-opened-vpn-access.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-06-29-twilio-employee-vishing-stole-credentials.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-07-20-cloudflare-sms-aitm-okta-phish-stopped-by-fido2.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-08-04-twilio-0ktapus-smishing-harvested-employee-otps.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-09-15-uber-contractor-mfa-fatigue-opened-internal-tools.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-10-14-dropbox-circleci-phishing-stole-github-otps.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-11-01-cisa-2022-phishing-resistant-mfa-number-matching.html2026-09-210.8monthly https://legacymfa.sucks/posts/2022-12-04-activision-sms-phishing-hit-employee-slack.html2026-09-210.8monthly https://legacymfa.sucks/posts/2026-09-21-how-workforce-vishing-still-steals-mfa-access.html2026-09-210.8monthly https://legacymfa.sucks/posts/2023-06-08-storm-1167-aitm-stole-m365-sessions-and-mfa.html2026-09-190.8monthly https://legacymfa.sucks/posts/2023-07-29-okta-helpdesk-mfa-resets-unlocked-super-admins.html2026-09-190.8monthly https://legacymfa.sucks/posts/2023-08-11-clorox-cognizant-helpdesk-password-mfa-resets.html2026-09-190.8monthly https://legacymfa.sucks/posts/2023-09-12-mgm-2023-cyberattack-helpdesk-mfa-reset-path.html2026-09-190.8monthly https://legacymfa.sucks/posts/2023-10-19-okta-support-breach-stolen-service-account-password.html2026-09-190.8monthly https://legacymfa.sucks/posts/2023-11-16-scattered-spider-helpdesk-mfa-reset-ttps.html2026-09-190.8monthly https://legacymfa.sucks/posts/2023-12-01-midnight-blizzard-sprayed-microsoft-no-mfa-test-tenant.html2026-09-190.8monthly https://legacymfa.sucks/posts/2023-01-13-mailchimp-social-engineering-stole-employee-credentials.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-02-05-reddit-employee-phishing-hit-internal-systems.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-03-01-corteva-adp-call-center-dob-reset-diverted-payroll.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-04-20-the-standard-aitm-spear-phish-stole-email-sessions.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-05-16-henry-ford-health-email-phishing-hit-3-mailboxes.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-01-19-microsoft-midnight-blizzard-password-spray-no-mfa.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-02-12-change-healthcare-citrix-portal-had-no-mfa.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-03-20-la-county-dmh-qr-phishing-took-m365-mailbox.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-04-01-cisco-duo-supplier-phish-exposed-sms-mfa-logs.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-05-23-michigan-medicine-it-desk-password-reset-vishing.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-06-13-scattered-spider-helpdesk-mfa-reset-okta-saas-attack.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-07-30-michigan-medicine-employee-approved-unsolicited-mfa.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-08-27-guidepoint-grit-vpn-vishing-mfa-harvest.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-09-01-tfl-scattered-spider-helpdesk-2fa-reset.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-10-16-iranian-m365-spray-and-mfa-push-bombing.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-11-08-seyfarth-shaw-helpdesk-mfa-phone-number-swap.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-12-11-okta-support-impersonation-sought-mfa-tokens.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-01-17-powerschool-powersource-no-mfa-support-login.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-02-13-simmons-workday-phishing-and-fraudulent-mfa-approval.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-03-01-uk-industrial-aitm-phishing-stole-workforce-sessions.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-04-17-ms-helpdesk-password-reset-social-engineering.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-05-02-co-op-helpdesk-reset-enabled-member-data-theft.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-06-20-aflac-social-engineering-opened-network-access.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-07-24-cisco-crm-vishing-exported-basic-profile-data.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-08-15-workday-hr-it-vishing-accessed-third-party-crm.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-09-12-unc6040-salesforce-vishing-stole-mfa-codes.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-10-15-whisper2fa-aitm-harvested-m365-mfa-tokens.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-11-15-princeton-oit-vishing-won-a-duo-push-approval.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-12-15-okta-payroll-pirates-helpdesk-mfa-re-enrollment.html2026-09-180.8monthly https://legacymfa.sucks/posts/2026-08-31-spring-ring-teams-vishing-never-stole-mfa-codes.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-07-bigbear-20-evilginx2-stole-m365-cookies-after-mfa.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-adapthealth-contractor-se-exposed-41m-patients.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-aesto-health-95m-breach-has-no-public-vector.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-passkey-helpdesk-vishing-stole-entra-m365-sessions.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-10-midnight-blizzard-device-code-phishing-stole-m365-tokens.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-15-ghostcode-stole-oauth-tokens-after-real-microsoft-mfa.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-n0va-kit-real-mfa-stolen-microsoft-tokens.html2026-09-140.8monthly https://legacymfa.sucks/posts/2026-08-04-ieh-m365-mailbox-phished-via-fake-login-page.html2026-08-310.8monthly https://legacymfa.sucks/posts/2026-08-10-gunra-fortinet-vpn-and-vdi-otp-backdoor-ttps.html2026-08-310.8monthly https://legacymfa.sucks/posts/2026-08-17-dgfip-breach-usurped-agent-and-third-party-logins-exposed.html2026-02-180.8weekly https://legacymfa.sucks/posts/2026-08-17-thehatman-lists-364m-entra-employee-dumps-tcs-filing-names.html2026-08-310.8monthly https://legacymfa.sucks/posts/2026-08-06-unc6671-vishing-stole-hedge-fund-mfa-sessions.html2026-08-220.8monthly https://legacymfa.sucks/posts/2026-08-07-five-week-vishing-harvested-mfa-codes-at-200-orgs.html2026-09-140.8weekly https://legacymfa.sucks/posts/2026-08-18-mirage2fa-aitm-stole-m365-mfa-and-session-cookies.html2026-08-200.8monthly https://legacymfa.sucks/posts/2026-08-06-payroll-pirates-aitm-users-finished-mfa-attackers-still.html2026-08-180.8weekly https://legacymfa.sucks/posts/2026-08-14-how-aitm-phishing-captured-a-live-microsoft-365-session-and.html2026-08-170.8monthly https://legacymfa.sucks/posts/2026-07-27-how-a-weak-employee-email-password-led-to-mass-file-theft.html2026-08-120.8monthly https://legacymfa.sucks/posts/2026-08-04-greatness-phaas-stole-mfa-approved-microsoft-365-tokens-via.html2026-08-120.8monthly