Tracking BigBear 2.0 Evilginx2 Phishing Campaign

Reported 07 Sep 2026 by otx · Severity: medium

In June 2026, researchers uncovered BigBear 2.0, a rebranded Evilginx2-based phishing-as-a-service framework targeting Microsoft 365 credentials globally. The operation, managed by operator 'General Boss', deployed 42 VPS nodes primarily hosted on Vultr infrastructure, utilizing