A new phishing tool, EvilProxy, has led to a significant increase in number of business e-mail compromises (BEC). This enables the phishing to bypass most forms of multi-factor authentication (MFA), thus compromising user accounts and ending in attempted payment fraud.