Astaroth Phishing Kit Bypasses 2FA to Hijack Gmail and Microsoft Accounts

Astaroth is an advanced phishing kit that leverages an evilginx-style reverse proxy to act as a man-in-the-middle, capturing usernames, passwords, 2FA tokens and session cookies in real time to bypass two-factor authentication for major email and cloud providers; the kit includes a feature-rich control panel, is marketed on Telegram and cybercrime forums with bulletproof hosting options, and is noted for high sophistication and active sale.