New Starkiller Phishing Framework Uses Real Login Pages to Bypass MFA Security

A new phishing framework called Starkiller is raising the bar for “phishing-as-a-service” by serving victims the real login pages of major brands through attacker infrastructure, making pages look authentic and stay up to date. By acting as a live reverse proxy, it can capture credentials and, more importantly, steal session cookies/tokens after the victim completes multi-factor authentication (MFA), enabling […]

The post New Starkiller Phishing Framework Uses Real Login Pages to Bypass MFA Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.