muraena

Muraena — это почти прозрачный обратный прокси-сервер, предназначенный для автоматизации фишинговых и пост-фишинговых действий. Инструмент заново реализует 15-летнюю идею использования кастомного обратного прокси-сервера для динамического взаимодействия с целевым источником, а не для поддержки и...

How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back

Attackers are increasingly using new phishing toolkits open-source, commercial, and criminal to execute adversary-in-the-middle AitM attacks. AitM enables attackers to not just harvest credentials but steal live sessions, allowing them to bypass traditional phishing prevention controls such as MF...

Low-Detection Phishing Kits Increasingly Bypass MFA

More and more phishing kits are focusing on bypassing multi-factor authentication MFA methods, researchers have warned – typically by stealing authentication tokens via a man-in-the-middle MiTM attack. As MFA continues to see widespread consumer and business adoption – a full 78 percent of...