A new phishing kit called Astaroth bypasses two-factor authentication through session hijacking and real-time credential ...