Gmail, Yahoo targeted by a new two-factor authentication phishing kit

SlashNext Threat Researchers discovered a new phishing kit on cybercrime networks. The kit is called Astaroth, and it bypasses two-factor authentication (2FA) via session hacking and real-time interception of credentials.

The kit deploys a evilginx-style reverse proxy to seize and exploit traffic between targets and legitimate authentication services (such as Gmail, Yahoo and Microsoft) and acts as a man-in-the-middle to capture tokens, credentials, and session cookies. Since Astaroth can intercept authentication data in real-time, many traditional phishing defense measures are ineffective.

You have 0 complimentary articles left.

Join our exclusive community!

When you do, you'll gain access to:

Educational Webinars, Videos & Podcasts: Receive cutting-edge insights and invaluable resources, empowering you to stay ahead in the dynamic world of security.
Empowering Content: At your computer or on-the-go, stay up-to-date when you receive our eNewsletters curated with the latest technology and services that address physical, logical, cyber and enterprise resilience.
Unlimited Article Access: Dive deep into the world of cybersecurity and risk management leadership with unlimited access to our library of online articles.

Already have an account? Sign in here.

In today’s rapidly changing healthcare environment, reliable and timely communication during emergencies is crucial. A well-implemented Mass Notification System (MNS) can differentiate between chaos and control during critical natural disasters, medical emergencies, or security threats.

Gmail, Yahoo targeted by a new two-factor authentication phishing kit

Join our exclusive community!

Sign-up to receive top management & result-driven techniques in the industry.

Join over 20,000+ industry leaders who receive our premium content.