Phishing attacks that bypass 2-factor authentication are now easier to execute [telecom]

open original image

Please send posts to telecom-digest.org, with userid set to telecomdigestsubmissions, or via Usenet to comp.dcom.telecom

The Telecom Digest is made possible by generous supporters like John Levine

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Phishing attacks that bypass 2-factor authentication are now easier to execute

Researchers released two tools--Muraen and NecroBrowser--that automate phishing attacks that can bypass 2FA. Most defenses won't stop them.