‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA

A new phishing-as-a-service called 'Starkiller' proxies real login pages and MFA, making phishing attacks more convincing and harder to detect.

Most phishing websites are little more than static copies of login pages for popular online destinations, and they are often quickly taken down by anti-abuse activists and security firms. But a stealthy new phishing-as-a-service offering lets customers sidest…