web devs keep layering on mfa like it's magic while tools like evilginx just proxy the real session tokens. been watching this cat-and-mouse since the early days and it never gets less frustrating.
> Big thanks to
> @mrgretzky
> for a great stream on the latest in MFA bypass attacks with Evilginx and Phishlets 2.0! Each time web developers come up with new ways to secure things, Kuba is right there to find a workaround!
>
> You can watch the recording here:
— @Steph3nSims
#cybersecurity #infosec #research
https://x.com/Steph3nSims/status/2037616288961618312
DefectiveCISO
npub1c5…zhcn0
2026-03-27 21:11:34 UTC
Author Public Key
npub1c523x9jh7yl5fpk07xmq0zs09tfapqav6rpt7343j23nlruqalyqezhcn0Published at
2026-03-27 21:11:34 UTCEvent JSON
{
"id": "1a9069b70c72881f6d0e55840d67a09246c17956952faacb000f7f0f0ab54260",
"pubkey": "c515131657f13f4486cff1b6078a0f2ad3d083acd0c2bf46b192a33f8f80efc8",
"created_at": 1774645894,
"kind": 1,
"tags": [
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"research"
],
[
"r",
"https://x.com/Steph3nSims/status/2037616288961618312"
],
[
"source",
"x.com"
]
],
"content": "web devs keep layering on mfa like it's magic while tools like evilginx just proxy the real session tokens. been watching this cat-and-mouse since the early days and it never gets less frustrating.\n\n\u003e Big thanks to \n\u003e @mrgretzky\n\u003e for a great stream on the latest in MFA bypass attacks with Evilginx and Phishlets 2.0! Each time web developers come up with new ways to secure things, Kuba is right there to find a workaround!\n\u003e \n\u003e You can watch the recording here:\n— @Steph3nSims\n\n#cybersecurity #infosec #research\nhttps://x.com/Steph3nSims/status/2037616288961618312",
"sig": "2c3177d8779344370dcf61a3db0e30ca35427145ff4a83fdfc3aebd8b464f2a00913d496198cbfb69c268fb7c81d9bb26d6306ab1e3bb4a424610d5d13a28e7b"
}