FBI: Phishing Can Defeat Two-Factor Authentication

A recent Privacy Industry Notification points to two new hacker tools that can turn a victims browser into a credential-stealing zombie.

Human beings can be tricked. This fact is a hard-to-patch vulnerability in many systems. And that is the
tl;dr
version of a notice from the FBI that recently hit industry groups.
According to the Private Industry Notification, criminals are bypassing two-factor authentication with a combination of well-known techniques including social engineering and man-in-the-middle attacks.
In addition to reminding organizations of the dangers of SIM-swapping exploits, the notice points to two new hacker tools:
Mureana
(named for a family of eels), which automates phishing attacks, and
NecroBrowser
, which helps to hijack a legitimate authentication session. Together, the tools can turn a victims browser into a credential-stealing zombie that gives no notice to the legitimate user.
The FBI recommends that companies continue to educate users on phishing techniques and, for especially high-value accounts, use a variety of different authentication methods with tokens that regularly change.
Read more
here
and
here
.
This free, all-day online conference offers a look at the latest tools, strategies, and best practices for protecting your organization’s most sensitive data. Click for
more information
and, to register,
here
.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
FBI: Phishing Can Defeat Two-Factor Authentication