Facebook Phishing Post.php Code (720p)

In this post, we’ll break down what post.php does, why attackers use it, and—most importantly—how to defend against it.

The most dangerous variant. After stealing the password, the script doesn't redirect immediately. Instead, it displays a second screen asking for the "authentication code from your SMS or Google Authenticator." This is called an or an Adversary-in-the-Middle (AitM) phishing kit. facebook phishing post.php code