3 ms·
If we are talking about TOTP, there is a time limit to that, which makes it harder, yeah.
by johnisgood 1y ago
If we are talking about TOTP, there is a time limit to that, which makes it harder, yeah.
- Urd- 1y agoNot much harder. The state of the art of phishing right now is proxy based setups like evilginx which pass along credentials in real time. Then you just save the session cookie or change/add the 2fa mechanisms so you can get in whenever you want with the stolen credentials.