Credential Harvesting

Credential harvesting is the theft of usernames, passwords and other login data through deception, typically using fake login pages. Modern phishing kits go further, as reverse proxies capture session cookies during live logins and bypass MFA entirely.