#starkiller — Public Fediverse posts on home.social

The Threat Codex @[email protected] · 2026-02-25 · 14:08 UTC

Starkiller Phishing Kit: Why MFA Fails Against Real-Time Reverse Proxies
#Starkiller
https://bytearchitect.io/network-security/Starkiller-Phishing-Kit-Why-MFA-Fails-Against-Real-Time-Reverse-Proxies/

#starkiller

The Threat Codex @[email protected] · 2026-02-25 · 14:08 UTC

Starkiller Phishing Kit: Why MFA Fails Against Real-Time Reverse Proxies
#Starkiller
https://bytearchitect.io/network-security/Starkiller-Phishing-Kit-Why-MFA-Fails-Against-Real-Time-Reverse-Proxies/

#starkiller

chris 🔓 Digital Sovereignty @[email protected] · 2026-02-25 · 09:49 UTC

Neue „Starkiller“-Phishingmethode umgeht offenbar sogar MFA.

SaaS-basiertes Kit nutzt URLs wie
https://[email protected]/
und zeigt die echte Seite unbemerkt über einen Proxy an, um Passwörter, SMS‑MFA‑Codes und Session‑Cookies abzufangen. Erkennen ist schwer, oft ist das @-Anhängsel im Tracking‑Teil oder URL‑Shortener versteckt.

💡Tipp: Misstrauen bei ungewöhnlichen URLs & Passwortmanager nutzen mit Domain-prüfung.

- https://abnormal.ai/blog/starkiller-phishing-kit

- https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/

#starkiller

chris 🔓 Digital Sovereignty @[email protected] · 2026-02-25 · 09:49 UTC

Neue „Starkiller“-Phishingmethode umgeht offenbar sogar MFA.

SaaS-basiertes Kit nutzt URLs wie
https://[email protected]/
und zeigt die echte Seite unbemerkt über einen Proxy an, um Passwörter, SMS‑MFA‑Codes und Session‑Cookies abzufangen. Erkennen ist schwer, oft ist das @-Anhängsel im Tracking‑Teil oder URL‑Shortener versteckt.

💡Tipp: Misstrauen bei ungewöhnlichen URLs & Passwortmanager nutzen mit Domain-prüfung.

- https://abnormal.ai/blog/starkiller-phishing-kit

- https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/

#starkiller

BrianKrebs @[email protected] · 2026-02-23 · 13:10 UTC

A slick new phishing-as-a-service offering demonstrates just how easily a username+password and a one-time token can be phished. Dubbed "Starkiller," the service uses cleverly disguised links to load the target brand's real website, and then acts as a relay between the victim and the legitimate site -- forwarding the victim's username, password and multi-factor authentication code to the legitimate site and returning its responses.

https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/

#phishing #MFA #starkiller

#phishing #mfa #starkiller

BrianKrebs @[email protected] · 2026-02-23 · 13:10 UTC

A slick new phishing-as-a-service offering demonstrates just how easily a username+password and a one-time token can be phished. Dubbed "Starkiller," the service uses cleverly disguised links to load the target brand's real website, and then acts as a relay between the victim and the legitimate site -- forwarding the victim's username, password and multi-factor authentication code to the legitimate site and returning its responses.

https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/

#phishing #MFA #starkiller

#phishing #mfa #starkiller

PrivacyDigest @[email protected] · 2026-02-21 · 03:27 UTC

‘#Starkiller ’ Phishing Service Proxies Real #Login Pages, #MFA

Most #phishing websites R little more than static copies of login pages 4 popular online destinations, & they are often quickly taken down by anti-abuse activists & #security firms. But a stealthy new phishing-as-a-service offering lets customers sidestep both of these pitfalls: It uses cleverly disguised links to load the target brand’s real website, & then acts as a relay between target & legitimate site

https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/

#security #phishing #mfa #login #starkiller

PrivacyDigest @[email protected] · 2026-02-21 · 03:27 UTC

‘#Starkiller ’ Phishing Service Proxies Real #Login Pages, #MFA

Most #phishing websites R little more than static copies of login pages 4 popular online destinations, & they are often quickly taken down by anti-abuse activists & #security firms. But a stealthy new phishing-as-a-service offering lets customers sidestep both of these pitfalls: It uses cleverly disguised links to load the target brand’s real website, & then acts as a relay between target & legitimate site

https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/

#security #phishing #mfa #login #starkiller

The Threat Codex @[email protected] · 2026-02-20 · 21:40 UTC

Starkiller: New Phishing Framework Proxies Real Login Pages to Bypass MFA
#Starkiller
https://abnormal.ai/blog/starkiller-phishing-kit

#starkiller

The Threat Codex @[email protected] · 2026-02-20 · 21:40 UTC

Starkiller: New Phishing Framework Proxies Real Login Pages to Bypass MFA
#Starkiller
https://abnormal.ai/blog/starkiller-phishing-kit

#starkiller