A new phishing kit called 'Rockstar 2FA' is targeting Microsoft 365 accounts.The kit can bypass multi-factor authentication (MFA) and steal session cookies.It has been aggressively promoted on Telegram and dark web forums.The kit is available for purchase at $200.