Advisory / Blog EvilProxy Malware Steals Session Tokens bypassing MFA on Victim’s Email Account Hackers have been using EvilProxy to capture authenticated session tokens from unsuspecting phishing email victims.