Adversary-in-the-Middle Phishing

Phishing in which a reverse proxy sits between the victim's browser and the real login service, passing credentials and MFA responses through in real time so the attacker ends up holding an authenticated session.