AiTM Non-Incident Report

We delve into the investigation of a foiled AITM attack involving Cloudflare workers.dev infrastructure and highlight the re-use of multiple domains across different campaigns. This particular attack was prevented from succeeding by well constructed Conditional Access policies