4 ms·
Link to the blog detailing the attack: https://breakdev.org/evilginx-advanced-phishing-with-two-factor-authentication-bypass/ https://breakdev.org/evilginx-adva
by colemannugent 8y ago
Link to the blog detailing the attack:
https://breakdev.org/evilginx-advanced-phishing-with-two-factor-authentication-bypass/ https://breakdev.org/evilginx-advanced-phishing-with-two-fac...
Looks more like an extended spoofing attack rather than an exploit.
- testplzignore 8y agoYeah. I'm not seeing anything novel about this. It's just straight up phishing/spoofing. From the TechCrunch article: > He estimates that hackers will begin trying this technique in the next few weeks and urges users and IT managers to harden their security protocols. Why the next few weeks? The blog post is from last year. Again, there's nothing new about it. The TechCrunch article seems to basically be a press release for the "KnowBe4" company.
- colemannugent 8y agoYeah, I was kinda wary since if TechCrunch picked it up it's probably been in the wild for months. But you're right, there's nothing new about this other than this being the first time TechCrunch has seen this.