EvilProxy Phishing-as-a-Service with MFA Bypass Capability Emerged in the Dark Web

Early occurrences of EvilProxy have been initially identified in connection to attacks against Google and MSFT customers who have MFA enabled on their accounts – either with SMS or Application Token.