Unverified50% confidenceFactExact time
实时钓鱼代理（AiTM）攻击如开源工具Evilginx2能够在用户与真实服务器之间插入反向代理，实时窃取有效会话令牌，从而绕过2FA
1
Sources
50%
Confidence
Long-term
Relevance
7/10/2026
First Seen
Sources
Beware the Gemini Free Membership Scam: The Account Security Risks of Leaked Backup Codes
bilibiliOpenclaw安装7/5/2026
Related Claims
Unverified作为传输层，Chat Agent会将AI通信绑定到Trigger.dev基础设施，存在供应商锁定风险68% similarUnverified免翻墙直接访问AI官网通常通过反向代理实现，用户请求经过第三方服务器中转66% similarUnverifiedMan-in-the-middle phishing frameworks such as EvilProxy and Evilginx, exposed in 2023, can capture in real time the session cookies generated after a user completes 2FA, without needing to install malware on the victim's device.66% similarUnverifiedThe technology stack for this hands-on project consists of LangChain-powered AI capabilities, a RAG-architecture intelligent customer service system, a FastAPI backend, a Vue3+Vite admin frontend, and a native WeChat Mini Program mobile client.62% similarUnverified与基于Web微信协议逆向、iPad协议模拟等非官方方案不同，iLink Bot API具备更高的稳定性和合规性，非官方方案常面临封号风险59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/458584API
curl https://kongchang.com/api/v1/knowledge/claims/458584MCP
get_claim(id=458584)