Evilginx AiTM Attack Captures Microsoft Credentials, MFA Tokens, and Authenticated Sessions

A growing wave of targeted phishing attacks is putting Microsoft users at serious risk, and the tool behind it is more sophisticated than most people realize. Security researchers have documented how Evilginx, an adversary-in-the-middle framework, is being used to silently intercept Microsoft login sessions, stealing usernames, passwords, MFA...

Read the full article at the source.