YouTube ‘influencers’ get 2FA tokens phished
100K or so creators in the YouTube car community were targeted by a phishing campaign that captured 2FA codes. Continue reading YouTube ‘influencers’ get 2FA tokens phished
Collaborate Disseminate
100K or so creators in the YouTube car community were targeted by a phishing campaign that captured 2FA codes. Continue reading YouTube ‘influencers’ get 2FA tokens phished
See the Attack They Can’t Refuse!
Video and Slide Deck from EH-Net Live! Jan 2019
The InfoSec industry has done a pretty good job over the last couple of decades in protecting internal corporate infrastructure and the endpoints that made up the traditi… Continue reading Video: A Perfect Crime: The Tech and Psych of Effective Phishing
Register Now for an Offer You Can’t Refuse!
Join Erich Kron of KnowBe4 for a technical foundation of phishing with tools such as Modlishka and SET and how to drastically ramp up their effectiveness with proven techniques of hacking the human brai… Continue reading Webinar: A Perfect Crime: The Tech and Psych of Effective Phishing on Jan 31, 2019
A penetration testing tool called Modlishka can defeat two-factor authentication in the latest 2FA security issue. We asked a roundtable of experts what it all means. Continue reading Yet Another Bypass: Is 2FA Broken? Authentication Experts Weigh In
A researcher has published a tool called Modlishka, capable of phishing 2FA codes sent by SMS or authentication apps. Continue reading 2FA codes can be phished by new pentest tool
A researcher has published a tool called Modlishka, capable of phishing 2FA codes sent by SMS or authentication apps. Continue reading 2FA codes can be phished by new pentest tool
Attackers have a new phishing tool in their arsenal, and it’s a powerful one. A penetration tester released an open source toolkit that can be used to easily set up phishing attacks that can bypass two-factor authentication (2FA). Dubbed Modlish… Continue reading New Phishing Kit Allows Bypassing Two-Factor Authentication with Ease
Modlishka may help raise awareness of the danger of reverse proxy phishing attacks, but it’s easy to imagine that many criminals will be tempted to put it to malicious use.
Continue reading Automated phishing attack tool bypasses 2FA protection