Back
Tool
Evilginx
Related CVEs
Recent activity
Identity-Based Attacks Target Authentication Systems and CredentialsRecent identity-based attacks have exploited vulnerabilities in authentication systems, targeting credentials and identity infrastructure. Notable incidents include the compromise …AI-Powered Phishing Campaigns Render Blocklists IneffectiveAI has significantly enhanced phishing tactics, making traditional blocklists obsolete. Attackers utilize AI to generate phishing pages from screenshots in mere minutes, leading to…Phishing Campaign Exploits Google Services to Evade DetectionA sophisticated phishing campaign has been identified that routes victims through Google services, including Google Meet and Google Ads, before landing on a credential-harvesting p…Session Hijacking Threats Bypass Two-Factor AuthenticationRecent reports reveal that session hijacking techniques are compromising accounts even with two-factor authentication (2FA) enabled. Attackers exploit session cookies, which are st…Misconfigured Server Exposes Evilginx Phishing Operations Targeting Microsoft 365A misconfigured server in Budapest has exposed a phishing operation targeting Microsoft 365 users. The server was running a Python HTTP server with directory listing enabled, allow…Emerging Threats: Authorization Phishing and InstallFix AttacksIn 2026, cybersecurity experts have identified two significant attack vectors: authorization phishing and InstallFix. Authorization phishing exploits OAuth mechanisms to obtain acc…Passkeys Vulnerabilities Exploited via Social Engineering AttacksRecent reports indicate that while passkeys enhance authentication security, they are still vulnerable to social engineering attacks. Attackers are exploiting passkey-themed phishi…PhishU Framework Enhances Phishing Simulations with ClickFix and AiTM ProxyingThe PhishU Framework has introduced advanced phishing simulation capabilities through its ClickFix and AiTM proxying features. These tools allow operators to conduct realistic phis…Evilginx Phishing Operation Targets 18 U.S. Universities, Bypasses MFAA coordinated phishing campaign using the Evilginx toolkit has targeted at least 18 American universities, exploiting advanced session-hijacking techniques to bypass multi-factor a…