Back Blog.Knowbe4

New BlackForce Phishing Kit Bypasses Multifactor Authentication

Blog.Knowbe4 •KnowBe4 Team • December 22, 2025

Zscaler has published a report on a new phishing kit dubbed “BlackForce” that uses Man-in-the-Browser (MitB) attacks to steal credentials and bypass multi-factor authentication . Notably, the kit “features a vetting system to qualify targets, after which a live operator takes over to orchestrate a guided compromise.”

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BlackForce Phishing Kit Bypasses MFA with Man-in-the-Browser Attacks Zscaler has reported on a new phishing kit named 'BlackForce' that utilizes Man-in-the-Browser (MitB) attacks to steal user credentials and circumvent multi-factor authentication (MFA). The kit includes a vetting system to identify targets, allowing a live operator to manage the compromise process directly. This development poses a significant risk to organizations relying on MFA for security. 1 sources 46

Extracted Entities

New BlackForce Phishing Kit Bypasses Multifactor Authentication

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)