Evilginx AiTM phishing steals Microsoft logins, MFA tokens, and session cookies, bypassing MFA through live login relays.