Reddit’s Phishing Breach: When MFA Codes Get Phished Too
A cloned intranet page harvested an employee's password and MFA code, opening hours of internal access. Phishing-resistant MFA and self-report lessons.
0ktapus: The SMS Phishing Wave That Hit 130+ Companies
Fake Okta pages, real-time MFA relay, and one crew harvesting 10,000 identities. Why Cloudflare walked away clean and Twilio didn't.