muraena

Muraena es un proxy inverso casi transparente orientado a automatizar actividades de phishing y post-phishing. La herramienta reimplementa la idea de hace 15 años de usar un proxy inverso personalizado para interactuar dinámicamente con el origen objetivo, en lugar de mantener y servir páginas...

How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back

Attackers are increasingly using new phishing toolkits open-source, commercial, and criminal to execute adversary-in-the-middle AitM attacks. AitM enables attackers to not just harvest credentials but steal live sessions, allowing them to bypass traditional phishing prevention controls such as MF...

Low-Detection Phishing Kits Increasingly Bypass MFA

More and more phishing kits are focusing on bypassing multi-factor authentication MFA methods, researchers have warned – typically by stealing authentication tokens via a man-in-the-middle MiTM attack. As MFA continues to see widespread consumer and business adoption – a full 78 percent of...