> EssentialInfoSec
Home / Feb 20, 2026 / Story
1
#1 Krebs on Security threat-intel February 20, 2026 at 20:00 UTC

‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA

By BrianKrebs

AI Summary

Krebs reports on 'Starkiller,' a sophisticated phishing-as-a-service that proxies real login pages and forwards victims' usernames, passwords, and multi-factor authentication tokens to attackers. This live-relay approach bypasses traditional phishing detection methods that look for static copies of login pages, representing a significant evolution in phishing tactics that directly defeats MFA protections.

Read full article → https://krebsonsecurity.com/2026/02/starkiller-phi…

Relevance score: 95.0/100

# More from February 20

  1. 2
    CISA: BeyondTrust RCE flaw now exploited in ransomware attacks BleepingComputer
  2. 3
    BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration The Hacker News
  3. 4
    Data breach at French bank registry impacts 1.2 million accounts BleepingComputer
  4. 5
    PayPal discloses data breach that exposed user info for 6 months BleepingComputer
  5. 6
    Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems The Hacker News
  6. 7
    Mississippi medical center closes all clinics after ransomware attack BleepingComputer
  7. 8
    FBI: Over $20 million stolen in surge of ATM malware attacks in 2025 BleepingComputer
  8. 9
    PromptSpy is the first known Android malware to use generative AI at runtime BleepingComputer
  9. 10
    Ukrainian national gets 5-year sentence for involvement in North Korea IT worker scheme The Record