Mutant Spider doesn't steal passwords. It resets MFA and steals the token
venturebeat.com