Netskope Threat Labs

FakeAuth

ATP Sandbox Adv. HeuristicsAV

This generic detection identifies fake authentication windows and login forms that trick users into entering credentials for harvesting by cyberattackers.

First seen
April 2026
Last seen
October 2026
Alert Name
Dump:Generic.FakeAuth.B.6160ABFB
Generic.FakeAuth.A.1A55499E
Generic.FakeAuth.A.1B031158
Generic.FakeAuth.A.1C0289AD
Generic.FakeAuth.A.234869D4
Generic.FakeAuth.A.2C8FF78F
Generic.FakeAuth.A.3BD6DFD4
Generic.FakeAuth.A.3E5081B8
Generic.FakeAuth.A.3E7AAEFC
Generic.FakeAuth.A.44B575EE