[rwth-security] New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts