The Procurement Trap: Inside an AiTM Campaign Targeting Global Institutions

Authors: Darby Wise, Nick Sundvall Executive Summary Right now, someone may be sitting invisibly between your users and their login pages. They’re not guessing passwords. They’re not cracking MFA codes. They’re simply waiting, and when the authentication succeeds, they take the session. This is adversary-in-the-middle phishing (AiTM), and it has quietly become one of the most effective techniques in the modern threat actor’s toolkit. The campaign we…

Diamond Model