Preview image for a blog post

Lexfo Uncovers Sophisticated Phishing Kits Leveraging Evilginx to Bypass MFA

New phishing kits use open-source Evilginx to proxy M365 sessions, capturing cookies and OAuth tokens, bypassing MFA.