New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts.
Please Be Vigilant when accessing company accounts, this does not just apply to Microsoft and Google. Always make sure you check the above address for proper spelling. Snippet from Bleeping