
- Cybercriminals abuse Bubble.io no-code platform to host phishing apps
- Trusted domain bypasses email security, tricking victims into Microsoft 365 credential theft
- Kaspersky warns technique likely to spread via Phishing-as-a-Service kits, making attacks more dangerous