New research from Barracuda Networks has identified a surge in attacks by Saiga 2FA, a small-scale but sophisticated phishing kit. Activity increased significantly in February 2026, following earlier sightings targeting legal organizations in Australia in 2025. The kit operates as a boutique service rather than a high-volume automated platform, focusing on highly targeted campaigns against enterprise email users. Saiga 2FA serves as an Adversary-in-the-Middle tool that bypasses multifactor a
