Unverified50% confidenceFactExact time
Adversarial proxy tools (such as Evilginx2 and Modlishka) can relay traffic between users and real websites in real time, stealing session cookies at the moment the user completes MFA verification.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
Unverified实时钓鱼代理（AiTM）攻击如开源工具Evilginx2能够在用户与真实服务器之间插入反向代理，实时窃取有效会话令牌，从而绕过2FA78% similarUnverifiedMan-in-the-middle phishing frameworks such as EvilProxy and Evilginx, exposed in 2023, can capture in real time the session cookies generated after a user completes 2FA, without needing to install malware on the victim's device.70% similarUnverifiedAutomation tools that log into websites on behalf of users must contend with CAPTCHAs, device fingerprint detection, anomalous behavior analysis, and bot detection systems such as Cloudflare and DataDome.68% similarUnverified免费白嫖站点常通过中间代理转发、共享账号池、套壳廉价第三方API等方式实现所谓的「直达官网」67% similarUnverified免翻墙直接访问AI官网通常通过反向代理实现，用户请求经过第三方服务器中转64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1000364API
curl https://kongchang.com/api/v1/knowledge/claims/1000364MCP
get_claim(id=1000364)