--- title: Is Multifactor Authentication (MFA) Enough to Shield You from Evolving Phishing Attacks? description: "Unmasking EvilProxy: A Global Phishing Onslaught Targeting Executives. Is MFA Enough? Learn How Advanced Strategies Can Safeguard Your Organization." image: https://blog.rcsprofessional.com/hubfs/mfa.png --- [![RCS Professional Services](https://blog.rcsprofessional.com/hs-fs/hubfs/RCSProfessionalServices_November2019/images/logo.png?width=749&height=211&name=logo.png "RCS Professional Services")](https://blog.rcsprofessional.com/) [![Sign up for our Newsletter!](https://no-cache.hubspot.com/cta/default/6409599/f350a29a-2630-4d11-a22d-1e1bcbc7cd14.png)](https://www.rcsprofessional.com/newsletter/) - [Back to Main Website](https://www.rcsprofessional.com) # Is Multifactor Authentication (MFA) Enough to Shield You from Evolving Phishing Attacks? [September 6, 2023](https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks) In a concerning turn of events, attackers have recently launched an extensive phishing campaign named EvilProxy, causing a storm of trouble for thousands of Microsoft 365 users worldwide. This campaign targeted high-profile user accounts, mainly those belonging to top executives, with the ultimate goal of infiltrating deeper into organizations' internal systems. Over a span of three months from March to June of 2023, phishing attackers have flooded over 100 organizations across the globe with a staggering 120,000 phishing emails. The primary aim was to gain control over executive-level accounts within Microsoft 365, creating a pathway for more sinister attacks within the targeted organizations. Researchers unveiled the tactics used in this ongoing attack scheme. The attackers employed a variety of phishing methods, including disguising as reputable brands, evading security scans, and a multi-step infection chain. These attempts allowed them to successfully seize control of cloud accounts belonging to high-ranking executives. The scope of this campaign is truly alarming. Over the past six months, the number of compromised accounts has surged by more than 100%, impacting organizations with a combined workforce of 1.5 million employees across the world. EvilProxy, a phishing-as-a-service tool utilized by the attackers, played a pivotal role in bypassing multi-factor authentication (MFA), a widely hailed security measure. This tool leveraged techniques like reverse proxy and cookie injection to slip past MFA barriers, rendering it ineffective in preventing these attacks. Even when MFA was in place, the attackers used pages that could request MFA credentials to validate stolen information and successfully authenticate themselves. Once the attackers acquired the targeted credentials, they wasted no time in accessing executives' cloud accounts, achieving unauthorized entry within seconds. To maintain their hold on these compromised accounts, the attackers exploited a native Microsoft 365 application to add their own MFA to the "My Sign-Ins" section. Their preferred method for this was utilizing the "Authenticator App with Notification and Code." Strikingly, the researchers found that even among users with MFA enabled, at least 35% fell victim to account takeovers, debunking the assumption that MFA alone provides foolproof protection.   Dissecting the EvilProxy Attack The EvilProxy attack pattern generally started with the attackers impersonating trusted services like Concur, DocuSign, and Adobe. These malicious emails, often sent from spoofed addresses, contained links to deceptive Microsoft 365 phishing websites. Clicking on these links initiated a multi-step process involving legitimate redirects, malicious cookies, and strategic 404 errors to obscure the attack's trail. The attackers exhibited extreme precision, focusing on C-suite executives in around 39% of their attacks. Among these targets, 17% were CFOs, and 9% were presidents and CEOs. The scale and effectiveness of the EvilProxy campaign underscore the increasing sophistication of phishing attacks. The incident serves as a stark reminder that no security measure is impenetrable, prompting organizations to adopt advanced security strategies. Cybersecurity experts recommend proactive monitoring for unusual activities and emerging threats, along with bolstering defenses to counteract evolving cybercriminal tactics.   In Conclusion This alarming campaign highlights the urgency for organizations to elevate their cybersecurity practices, combatting the ever-evolving tactics of malicious attackers like those behind the EvilProxy campaign. RCS has been helping businesses stay protected and cyber-safe since 1999. If you need help with your business cyber security contact us at [info@rcsprofessional.com](mailto:info@rcsprofessional.com) or visit https://www.rcsprofessional.com/contact-us Share - [![Facebook](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/facebook.png)](https://www.facebook.com/RCSProServices/) - [![Linkedin](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/linkedin.png)](https://www.linkedin.com/company/rcsprofessionalservices/) - [![Twitter](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/twitter.png)](https://twitter.com/RCSProServices) - [![Instagram](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/instagram.png)](https://www.instagram.com/rcsproservices/) - [![YouTube](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/youtube.png)](https://www.youtube.com/channel/UCVy0Lqraxqrk3nRNOgQeyBQ) - [Get link https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks](https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks#get-link) - Icons/ic\_24\_facebook\_dark Facebook - [Icons/ic\_24\_twitter\_dark Twitter](https://twitter.com/share?text=Is%20Multifactor%20Authentication%20(MFA)%20Enough%20to%20Shield%20You%20from%20Evolving%20Phishing%20Attacks?&url=https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks) - Icons/ic\_24\_pinterest\_dark Pinterest - [Email](mailto:?subject=Is%20Multifactor%20Authentication%20(MFA)%20Enough%20to%20Shield%20You%20from%20Evolving%20Phishing%20Attacks?&body=https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks) - Other Apps Share - [Get link https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks](https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks#get-link) - Icons/ic\_24\_facebook\_dark Facebook - [Icons/ic\_24\_twitter\_dark Twitter](https://twitter.com/share?text=Is%20Multifactor%20Authentication%20(MFA)%20Enough%20to%20Shield%20You%20from%20Evolving%20Phishing%20Attacks?&url=https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks) - Icons/ic\_24\_pinterest\_dark Pinterest - [Email](mailto:?subject=Is%20Multifactor%20Authentication%20(MFA)%20Enough%20to%20Shield%20You%20from%20Evolving%20Phishing%20Attacks?&body=https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks) - Other Apps Link copied to clipboard ### Popular posts from this blog ## [Use the ‘Transparent Note’ App to Get Through Your Next Virtual Meeting or Interview](https://blog.rcsprofessional.com/use-the-transparent-note-app-to-get-through-your-next-virtual-meeting-or-interview) March 31, 2022 We're not superhuman, and no matter how hard we try to memorize every talking point or question, we can't work at our best without a little help. Even yet, it appears more impressive, especially on video conversations, if we never have to look away from the camera when interviewing or presenting. Finding a means to glance at both your notes and the video conference at the same time is the solution. We've discovered an app that can assist you with this: It's called Transparent Note, and it's not a play on words. Share - [Get link https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks](https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks#get-link) - Icons/ic\_24\_facebook\_dark Facebook - Icons/ic\_24\_twitter\_dark Twitter - Icons/ic\_24\_pinterest\_dark Pinterest - [Email](mailto:?subject=Is%20Multifactor%20Authentication%20(MFA)%20Enough%20to%20Shield%20You%20from%20Evolving%20Phishing%20Attacks?&body=https://blog.rcsprofessional.com/use-the-transparent-note-app-to-get-through-your-next-virtual-meeting-or-interview) [Post a Comment](https://blog.rcsprofessional.com/use-the-transparent-note-app-to-get-through-your-next-virtual-meeting-or-interview#comments-list) [Read More](https://blog.rcsprofessional.com/use-the-transparent-note-app-to-get-through-your-next-virtual-meeting-or-interview) ## [What’s New in Microsoft 365 Copilot for 2026: Features You Should Actually Be Using](https://blog.rcsprofessional.com/whats-new-in-microsoft-365-copilot-for-2026-features-you-should-actually-be-using) January 14, 2026 Microsoft 365 Copilot continues to evolve rapidly, but with every new release comes the challenge of separating real productivity gains from AI hype. If your team is asking which features actually matter, you are in the right place. In 2026, Microsoft has pushed updates that go beyond flashy demos. These enhancements are designed to help teams work smarter, save time, and focus on meaningful outcomes, not just interesting AI tools. Below, we break down the most impactful Copilot updates you should be using today. Share - [Get link https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks](https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks#get-link) - Icons/ic\_24\_facebook\_dark Facebook - Icons/ic\_24\_twitter\_dark Twitter - Icons/ic\_24\_pinterest\_dark Pinterest - [Email](mailto:?subject=Is%20Multifactor%20Authentication%20(MFA)%20Enough%20to%20Shield%20You%20from%20Evolving%20Phishing%20Attacks?&body=https://blog.rcsprofessional.com/whats-new-in-microsoft-365-copilot-for-2026-features-you-should-actually-be-using) [Post a Comment](https://blog.rcsprofessional.com/whats-new-in-microsoft-365-copilot-for-2026-features-you-should-actually-be-using#comments-list) [Read More](https://blog.rcsprofessional.com/whats-new-in-microsoft-365-copilot-for-2026-features-you-should-actually-be-using) ## [Political Scams 101: How to Spot and Stop Them](https://blog.rcsprofessional.com/political-scams-101-how-to-spot-and-stop-them) September 19, 2024 Political scams are becoming increasingly common, especially during election seasons when individuals are more likely to engage with political content. While political phone scams are widespread, scammers use a variety of tactics, from phishing emails to social media impersonations, to exploit public interest in elections and political causes. Share - [Get link https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks](https://blog.rcsprofessional.com/is-multifactor-authentication-mfa-enough-to-shield-you-from-evolving-phishing-attacks#get-link) - Icons/ic\_24\_facebook\_dark Facebook - Icons/ic\_24\_twitter\_dark Twitter - Icons/ic\_24\_pinterest\_dark Pinterest - [Email](mailto:?subject=Is%20Multifactor%20Authentication%20(MFA)%20Enough%20to%20Shield%20You%20from%20Evolving%20Phishing%20Attacks?&body=https://blog.rcsprofessional.com/political-scams-101-how-to-spot-and-stop-them) [Post a Comment](https://blog.rcsprofessional.com/political-scams-101-how-to-spot-and-stop-them#comments-list) [Read More](https://blog.rcsprofessional.com/political-scams-101-how-to-spot-and-stop-them) ### Archive - [March 2022 (8)](https://blog.rcsprofessional.com/archive/2022/03) - [July 2020 (7)](https://blog.rcsprofessional.com/archive/2020/07) - [September 2020 (6)](https://blog.rcsprofessional.com/archive/2020/09) - [October 2020 (6)](https://blog.rcsprofessional.com/archive/2020/10) - [April 2021 (6)](https://blog.rcsprofessional.com/archive/2021/04) [![RCS Professional](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/logo.png)](https://www.rcsprofessional.com) --- Small Business IT Solutions throughout the New York TriState - [![Facebook](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/facebook.png)](https://www.facebook.com/RCSProServices/) - [![Linkedin](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/linkedin.png)](https://www.linkedin.com/company/rcsprofessionalservices/) - [![Twitter](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/twitter.png)](https://twitter.com/RCSProServices) - [![Instagram](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/instagram.png)](https://www.instagram.com/rcsproservices/) - [![YouTube](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/youtube.png)](https://www.youtube.com/channel/UCVy0Lqraxqrk3nRNOgQeyBQ) ### CONTACT INFO. - ![CORPORATE OFFICE ](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/location.png) CORPORATE OFFICE 125 Maiden Lane 14th Floor New York, NY 10038 - ![RCS](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/mobile.png) Office: [212-532-9111](tel:6468378578) - ![Churchill Court](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/location.png) 701 Whitlock Ave SW, Unit K48   Marietta, GA 30064   - ![Office](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/mobile.png) Office: [404-900-9854](tel:+6468378578) - ![Email](https://blog.rcsprofessional.com/hubfs/RCSProfessionalServices_November2019/images/message.png) [info@rcsprofessional.com](mailto:info@rcsprofessional.com) © 2024 [RCS Professional Services](https://www.rcsprofessional.com). All rights reserved