Bubble AI app builder abused to steal Microsoft account credentials

Threat actors are exploiting the Bubble no-code app-building platform to create and host malicious web applications designed to steal Microsoft account credentials. This technique allows attackers to evade traditional phishing detection mechanisms by leveraging legitimate infrastructure. The campaign specifically targets Microsoft users through sophisticated phishing applications that appear legitimate due to their hosting on the trusted Bubble platform. This represents a novel abuse of legitimate development platforms for credential harvesting purposes.