evilginx2

MALICIOUS. The skill’s stated purpose is credential theft and MFA bypass through reverse-proxy phishing, with explicit instructions to capture and reuse victim session cookies. While the upstream tool source is publicly verifiable, the capability itself is an account-compromise workflow with clear data theft and offensive abuse intent.