Phishing kits adapt to the script of callers

Okta Threat Intelligence reports the discovery and analysis of custom phishing kits used in vishing campaigns that let callers control a victim’s browser authentication flow to harvest credentials and trick users into approving MFA; these kits are available as-a-service and are being used against Google, Microsoft, Okta and cryptocurrency providers.