# Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

> **Newsylist Open Intelligence Dossier** · First detected: 2026-09-08 06:29 UTC · Category: Technology · Sources: 9 · Current Velocity: 6.75

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| The Register | BigBear phishing crew nets thousands of Microsoft 365 credentials | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMivgFBVV95cUxQQmJVaGhrcF8yTk1Xd2ctQlhnTXU5Z3JVYW9UZVZHcDNOWWdxWmFqMGkyUjZZaGNoamNueUVmb0tQOEcyTHliMXNkTDdhYUNLQVNmWDI5bXVrRko1V2dVNzMtOVFuaENtRnFKenZ0TGw2ZFFjUHpzNzU1d2hyOE5yRDFuUk1pVHJsQWlRcXA5S09PT2NWYWs3SE5iS2FBY1RZQkd1Q2pONk5wcFJsM1FSUVFVWUVKeDlzdGljVWtR?oc=5) |
| TechRadar | Microsoft 365 users hit by two major threat campaigns - fake IT calls and phishing emails target users across the world | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMi7AFBVV95cUxOZEFhU1luT2s5TEtNYVJfVWlxajNIMU9xc01pQnpDcXJLcmpXUkhWSWM5NFMyc29yb2FjcFh1T2Q1LUJhem1RbG42cXdxd25BcXFqUkpyT29xb2pTMkJJSllfUkhYb1YxQnRxWlNfVWRPak5EMWhaSVZubjBOaU1UaGFLYTl3RFQ1QktiREUwUkNBRjNJUlZCaUhvRXU0d0RHNlFNeTJHVEtnWGwtYWhyUHhyczZ1U3RCZ3FzVlk4QTNEVWI5akJia3cwZElXdU1EelM5TkhXcmdYZHJKMlEzUjdfalZ2emRELXhRYw?oc=5) |
| Computerworld | BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMiwAFBVV95cUxQcFBqUlBHdmUxVHJkM0FwdDRvMDkxN1lPbkpHQ0ZaUENSUkl1LV9nZzdBTkVaa1lwZVdHMEFnODg0SlU0QlVtODBKbVVVc1pTVmU3R2xXZ2xwUnRCSXYydUd5ei02a21kVTdJdXV5RURlWU5Ud1dyWHdwSmxIeTJPcWlteEpvWjZzLWJzZVBjLVNfYjRVdEtHS3gwSUtYaDBrS1JpcXNBRGFLVEl0VVdaZnh2OThWWVlNY1JMeXJzY0Q?oc=5) |
| Security Affairs | IT Help Desk Impersonation Lets Hackers Bypass MFA | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMipAFBVV95cUxPbTNFZ3lCdzNfLXNDTnNmMzF5Ym01UFpZQXVhWnY5U1pRVlhYVGdRVXRveFNrOHl1S19XcV9EckhSWVhSdGprdmdmc2JQWDdZQkRSUU1FelRDOVBvajgtUDJhQmVpUWM4VFpFN0JSeVBYajJZWXNFZUFxU3hvV1VscWp3OV8xR1prVExNSjNhc3RqclNCZzF1MG5EX3liUXVkZlVfVtIBqgFBVV95cUxOZlRWcnNGMTlRS1ZnekVrSGd5c0F2T3k1d0tWd2JKVXE2bV9KNjg2WkY4cnVySWdjZ3VtU21tNTdrX1h6elpObXhjTTFxWUZkVUgzRjllSTRBeXFMZ2wxbEhZSlBfdUNxZWFkejlLNEZwZGt6dzNMOTQtN2czek81R1B5ZnFfcU5kcW9YYTFiLVhYankzUVhBdzROc0ZaR0Q0LUFLRkYyd2pMQQ?oc=5) |
| Windows Report | BigBear 2.0 Phishing Campaign Steals 5,000 Microsoft 365 Credentials After Bypassing MFA | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMitAFBVV95cUxPUGJLOGN3eDlQUkxKTk9FLXc1M256RFBMMDBUX0NoUzBGbVJ6bnpQNllVdWVvODk0SFp6dXZwOWhKTnJFb1g3RDRKSzQ3Q1h5NmlmN2xFR1VIU2FqZ3NvMzNJclF5bmxZOGVpS0FJQXRqNlBla2JtTDJ2NWdNU1R1S0NyNWpwa29MWTBHeFFSbFpuYVFnUnY5NkI3NlMwUkJGSktnQkFVV29pbGdCUk5PZmJoaDA?oc=5) |
| itsecurityguru.org | New ‘Knight Office’ Phishing Kit Steals Microsoft 365 Logins Without Touching a Password | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMiyAFBVV95cUxNRnNtOU9zZmNKbFlSWmxFUWx2QXJ3bERtaFBGd3JaTDJSSDhETXF0R0xXdXBjS1U0Mk5JTm9oZ2QwbFlHY1ctMF95b0FzSGVSOFpFR3dkUFhWaUFJSnU2bl9vVmJKNy1XZkotdjZCS29aQVNFeXBza1VxVVZxdmIxZ0xwUU1oRHRwU3FtaFVkZWFObGYwbkRNaG13ZGF3c0U3dkdOMlUyYW5GeGRaeGlWY1dUbG92U1lHMldaYjlBY19zaUNDZmVUMQ?oc=5) |
| BleepingComputer | BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMivAFBVV95cUxNSjhmMUl6aGRhN2tBQk5iWVQyS0p3cC04eWdfZzFhRlR1VENhaml4YUVZTzZ5M2ZtLVBDdUV2WGd1VTNiSkhjdkdtWkoyMUg5cXhJLVNWdWtZTlhhN0llTnJTTndGX1pJb09INXpNNkUxemZZU0oyM212amMxNmxweUdwRnFnRlJ1N2JtSFRnOUdLZGduT2lZTGdSWk05WmVYU25fMjVmQWZhc3Fkem1QRzBWWHlTWDhTYVdmRNIBwgFBVV95cUxNM01JVkdaR1FxT0t0ZGlpUHg3eDd3VF9vdjdUeU1Zb2RIb2gwNGppM3pIMmVZU01oR2tTa0tmUWxmQXozbXFWcW94UURjVnVIU0NpbU54VWNzYnZfd29pd1l3SzFxVE04NU5OaklYRngtbF94dzJIVjJSeG9pRUFsMnpqSng1d0loYVR1Tzd3SGY0VHN2ck1) |
| CloudSEK | Tracking BigBear 2.0 Evilginx2 Phishing Campaign | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMihAFBVV95cUxPenZyUGQ4eS1sbDE1X2dqV2xhWnJyc1MyRmZXMUJ0ODhWTVpidEl3MFRraDBPS2FsakwzTFlQZHNsdUkwSFhjUDBhclgxb3VEWlRyQkV0OHhxV1ktUTdfQ1UzZk5uYW16aUlyQXdFWFpUMEphMVM4NnRNNDB0d1pTZ1BpcFo?oc=5) |
| thehackernews.com | Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks | 2026-09-07 15:51 | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxNME1xYkpOSGpYYlRBMXIwM3I2ZDBKeUlCMHdrbnhLQWxOUkl2UDVwcmptMWpiZFpsZVpvZWM4NzlOYldVTWpqb2lYUExvczVyUlJNcE1UU0N2X1ljbGhwT1Nqc0NTTVF1dkpqQXZLRGwtWmROQl9HUl9TemFienVockd3?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-09-08/fake-it-calls-target-executives-in-microsoft-365-data-theft-and-extortion*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*