Hackers Using Evilginx to Steal Session Cookies and Bypass Multi-Factor Authentication Tokens

The report outlines how the Evilginx AiTM phishing toolkit operates as a transparent proxy that relays real site content to capture credentials and, critically, session cookies; by replaying stolen cookies attackers can bypass MFA and take over accounts, with a noted surge in campaigns targeting educational institutions and researcher findings showing unrestricted access and covert data exfiltration.