Astaroth 2FA Phishing Kit Exploits Gmail, Yahoo, Office 365, and Third-Party Accounts
ID: 4a35fd8d-845f-56a0-ba7d-c21fc5c4c305
STIX ID: report--4a35fd8d-845f-56a0-ba7d-c21fc5c4c305
Feed Name: Cyber Press
Threat Score
Astaroth is a newly advertised (Jan 2025) phishing kit that leverages an evilginx-style reverse proxy to intercept credentials, 2FA tokens, and session cookies in real time, enabling attackers to bypass two-factor authentication for services like Gmail, Yahoo, AOL, and Office 365; the kit is sold on cybercrime forums and distributed via Telegram with features such as bulletproof hosting, reCAPTCHA bypass, and testing options.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.