Adversary-in-the-Middle Phishing

Adversary-in-the-middle (AiTM) phishing uses a reverse proxy between the victim and a real login page to steal session tokens, allowing attackers to bypass multi-factor authentication. Reverse proxy frameworks such as Evilginx intercept valid session cookies during live logins, which is why phishing-resistant FIDO2 passkeys are the most effective countermeasure.