Hackers Leverage Evilginx to Undermine MFA Security Mimicking Legitimate SSO Sites

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Evilginx Framework Used for MFA Evasion via Phishing Attacks The Evilginx framework is being exploited in a new wave of phishing attacks targeting student login portals. These attacks enable hackers to bypass multi-factor authentication (MFA) by creating fake single sign-on (SSO) pages. Educational institutions are particularly affected by this emerging threat. 3 sources 24