New Phishing Tools Enable Attackers to Easily Bypass Multifactor Authentication
KnowBe4, Thursday, July 23rd, 2026
KnowBe4 warns that new phishing kits make it easy for attackers to bypass multifactor authentication.
KnowBe4 reports on a new generation of phishing kits that automate the bypass of multifactor authentication.
These tools use adversary-in-the-middle techniques to capture session tokens and defeat MFA protections at scale.
The report explains how lowered technical barriers let more attackers launch sophisticated MFA-bypass campaigns. KnowBe4 recommends phishing-resistant MFA, user training, and layered defenses to counter the threat.