Cybersecurity researchers have flagged the emergence of a new phishing tool known as FlowerStorm, which targets Microsoft 365 credentials. FlowerStorm appears to have replaced Rockstar2FA, a platform that circumvented two-factor authentication for Microsoft 365 accounts by intercepting login processes. Researchers suspect FlowerStorm to be the spiritual successor of Rockstar2FA due to overlapping features. The majority of FlowerStorm’s targets are in the US, Canada, UK, Australia, and Italy, particularly focusing on companies in the service industry. To safeguard against FlowerStorm attacks, caution with incoming emails is advised.