Utilizing Reverse Proxies to Compromise LastPass Users

During adversarial attack simulations, harvesting credentials through phishing are typically performed through cloned websites. A cloned site works by essentially copying the front end (such as the Gmail login page) and hosting it on a domain designed to mimic (as closely as possible) the real domain (gmail.com vs gmail.com-google.net). A victim will visit the cloned site, enter their credentials, the cloned site records the credentials, displays a “Login Error” to make it appear as if the victim typed their password incorrectly, and then redirect the victim to the real website. While this method is often “good enough”, it does have downfalls:

1. Cloned sites often have quirks in them that make them easy to spot as being fake, and
2. 2-factor authentication adds a layer of difficulty requiring real-time attacks.

Download the complete guide here: https://versprite.com/blog/application-security/reverse-proxy-attack/#download

// FIND VERSPRITE’S CYBERSECURITY TEAM ONLINE //
✦ VerSprite: https://versprite.com/
✦ LinkedIn: https://www.linkedin.com/versprite-llc/
✦ Twitter: https://twitter.com/versprite/
✦ YouTube: https://www.youtube.com/c/VerSprite


// ABOUT VERSPRITE //
VerSprite is a leader in risk-based cybersecurity services and PASTA threat modeling, enabling businesses to improve the protection of critical assets, ensure compliance, and manage risk. Our mission is to help you understand and improve your organization’s cybersecurity posture. With cyberattacks increasing in number and sophistication daily, it is important to protect your organization’s assets, protect your clients, and maintain the same, great reputation and trust you have worked hard to build. We believe that an integrated approach will result in better and more cost-effective security practices and better business outcomes overall.

✦ Visit our website: https://versprite.com/

#cybersecurity #reverseproxy #attacksimulation