Phishing as a Service to Ramp Up Supply Chain Attacks

Researchers observed EvilProxy (Moloch), a Phishing-as-a-Service that operates as a reverse proxy to transparently intercept login flows, capture credentials and MFA tokens, and hijack session cookies to perform account takeovers. The report warns that attackers are targeting both mainstream services (Google, Microsoft, Facebook, Twitter, etc.) and developer/package registries (GitHub, PyPI, RubyGems, npm), increasing risk of software supply-chain compromises, and cites recent incidents (e.g., a malicious PyPI update, exposed Travis CI logs, and stolen OAuth tokens) to illustrate potential impact and mitigation recommendations including CNAPP and runtime protections.