Unverified50% confidenceFactExact time
Man-in-the-middle phishing frameworks such as EvilProxy and Evilginx, exposed in 2023, can capture in real time the session cookies generated after a user completes 2FA, without needing to install malware on the victim's device.
1
Sources
50%
Confidence
Long-term
Relevance
8/15/2026
First Seen
Sources
Chrome DBSC技术详解：设备绑定会话凭证如何终结Cookie窃取
Related Claims
Unverified实时钓鱼代理（AiTM）攻击如开源工具Evilginx2能够在用户与真实服务器之间插入反向代理，实时窃取有效会话令牌，从而绕过2FA66% similarUnverified恶意站点可利用OAuth 2.0协议诱导用户在真实页面授权，从而获得读取邮件、访问云端文件等权限而无需获取密码63% similarUnverifiedAutomation tools that log into websites on behalf of users must contend with CAPTCHAs, device fingerprint detection, anomalous behavior analysis, and bot detection systems such as Cloudflare and DataDome.63% similarUnverifiedThe Dify online cloud version is accessible by registering and logging in at cloud.dify.ai, but there is a security concern that user data may be used for model training.58% similarUnverifiedThere is an AI Spring Festival couplet generator that can generate couplets online for free without requiring registration.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/751809API
curl https://kongchang.com/api/v1/knowledge/claims/751809MCP
get_claim(id=751809)