How to perform Phishing Attack with 2FA bypass by Valeriy Shevchenko

Information in the article is published for educational purposes only. Do not overstep the bounds set by law.

A few weeks ago I realized that it's should be interesting to learn about phishing campaign and how to perform it. I divide that story into different parts. The last part will be with a demonstration video of my results.

Phishing Domain.

As you understand — visually look good — is the main things in that story.

That example is perfect as a scam attack. The receiver is legitimate. Phone location link is pretty the same as real one icloud link. And the connection is https.

Pretty few users can understand that it's not a real sms from apple.

In that part, I highly recommend using UrlCrazy tool from Kali Linux toolbox. You can also use catphish.