Michael Klander on Mythryl: “"Attackers are using a tool called Evilginx to steal session…”

"Attackers are using a tool called Evilginx to steal session cookies, letting them bypass the need for a multi-factor authentication (MFA) token."

Malwarebytes@malwarebytes.com

The Evilginx phishing tool impersonates real sign‑in pages so everything looks normal, allowing attackers to steal login details and session cookies even after MFA.

bit.lyAttackers have a new way to slip past your MFAAttackers are using a tool called Evilginx to steal session cookies, letting them bypass the need for a multi-factor authentication (MFA) token.

3/12/25, 4:28 pm0 reposts1 like

Post