"Phishing Attack Bypasses Two-Factor Authentication"

Kevin Mitnick, a Chief Hacking Officer at KnowBe4, has demonstrated the use of a tool called evilginx to perform phishing attacks in order to gain control over targeted user accounts. The use of this tool can allow threat actors to evade two-factor authentication (2FA). This article continues to discuss the demonstration of this new exploit, 2FA, and the importance of security awareness training for employees.

Dark Reading reports "Phishing Attack Bypasses Two-Factor Authentication"