Tag: 2fa bypass

3 Attack Reports | 0 Vulnerabilities

Attack reports

Salty 2FA: Undetected PhaaS Hitting US and EU Industries

A new Phishing-as-a-Service (PhaaS) framework dubbed Salty 2FA has been discovered targeting industries in the US and EU. It uses a unique domain pattern combining .com subdomains with .ru domains and employs a multi-stage execution chain to resist detection. The kit can bypass multiple 2FA methods…
phaas
2fa bypass
2025-08-19
salty 2fa
storm-1575
domain pattern
behavioral detection
multi-stage execution
Published: August 19, 2025
Downloadable IOCs: 0

Your MFA Is No Match for Sneaky2FA

In early February 2025, the eSentire Threat Response Unit detected a user accessing a phishing site associated with Sneaky2FA, an Adversary-in-the-Middle Phishing-as-a-Service kit designed to bypass two-factor authentication. The attack involved a spam email with a link to a phishing PDF in OneDriv…
phishing
phaas
2fa bypass
office 365
2025-02-28
session cookies
sneaky2fa
Published: February 28, 2025
Downloadable IOCs: 15

RAFEL RAT, ANDROID MALWARE FROM ESPIONAGE TO RANSOMWARE OPERATIONS

Check Point Research has identified multiple threat actors utilizing Rafel, an open-source remote administration tool (RAT). The discovery of an espionage group leveraging Rafel in their operations was of particular significance, as it indicates the tool’s efficacy across various threat actor profi…
ransomware
android
infostealer
discord
2024-06-20
google play
rafel rat
data wipe
smartphone
2fa bypass
Published: June 20, 2024
Downloadable IOCs: 6
Click here to see more Attack Reports