Sign in

to access Corporate Intranet

No account? Create one!

Verify your identity

Enter the code sent to your device ending in **89

Didn't receive a code?

ATTACK CHAIN COMPLETED

MFA Bypass Technique Detected (AiTM Phishing)

[1] CREDENTIALS

EMAIL---
PASSWORD---
2FA_CODE---

[2] SESSION METADATA

BROWSERChrome/120
OSWindows 10
TIME12:00:00
CORES8

[3] THREAT ACTOR

[ PROXY CHAIN ACTIVE ]
> TOOL: Evilginx2
> SERVER: nginx/1.18
> STATUS: CONNECTED

FORENSIC BREAKDOWN

1. Device Fingerprinting

Notice Panel [2]. We didn't just take your password; we identified your Browser and OS. Attackers use this to craft specific malware payloads for your device.

2. Session Hijacking

By capturing the 2FA code in real-time, the attacker logs into the *real* site immediately, stealing your active Session Cookie. Changing your password later won't stop them.

RETURN TO SAFETY