Phishing kits that bypass MFA protection are growing in popularity

From helpnetsecurity.com

Phishing kits bypass MFA

The increased use of multi-factor authentication (MFA) has pushed developers of phishing kits to come up with ways to bypass that added account protection measure.

A current popular solution? Phishing kits that use a transparent reverse proxy to present the actual target website to the victim and allow attackers to capture the username and password entered by the victims AND the session cookie.

Read more…