Steal access data and trick MFA with Evilginx

In the context of IT security strategies, multifactor authentication (MFA) plays a major role today. The added value is clear, but the shot can also go backwards if there is a lack of user acceptance and incorrect implementation. The introduction of multifactor authentication (MFA) is undoubtedly an important step for companies to protect IT infrastructures and data. Nevertheless, many employees are still critical of the use of MFA. They see the…

A malicious mutation of the widespread Nginx web server facilitates malicious Adversary-in-the-Middle attacks. Sophos-X-Ops have analyzed the criminal potential of Evilginx in an experimental setup and provide tips for protection. Evilginx is a malware based on the legitimate and widespread open source web server Nginx. It can be used to steal usernames, passwords and session tokens and it provides [...] The article Evilginx steals access data a…

A malicious mutation of the widespread nginx web server facilitates malicious adversary-in-the-middle attacks. Sophos X-Ops have analyzed the criminal potential of Evilginx in an experimental setup and give tips for protection. The post steal access data and trick MFA with Evilginx first appeared on IT-I-Ko.