Starkiller: New ‘Commercial-Grade’ Phishing Kit Bypasses MFA

**Executive summary:** Starkiller is a commercially distributed phishing platform that proxies live login pages to capture credentials and bypass multi-factor authentication in real time; it includes deceptive URL generation, headless-Chrome proxying, real-time session monitoring and a keylogger, is sold as a subscription service, and presents a scalable, hard-to-detect threat to many online services.