State of Indiana

06/28/2022 | Press release | Distributed by Public on 06/28/2022 06:52

Conceptual MFA bypass steals Edge authentication cookies

A clever, new phishing technique uses Microsoft Edge WebView2 applications to steal victim's authentication cookies, allowing threat actors to bypass multi-factor authentication when logging into stolen accounts.

https://www.bleepingcomputer.com/news/security/clever-phishing-method-bypasses-mfa-using-microsoft-webview2-apps/?&web_view=true