ThreatHunter.ai Offers Free Identity Threat Detection to Combat Surge in MFA Bypass Attacks

ThreatHunter.ai, a provider of 24/7 managed threat hunting services, today announced it is offering all current customers complimentary 90-day access to MILBERT, its identity threat detection and response platform. The offer comes as adversary-in-the-middle (AiTM) phishing attacks continue to bypass traditional multi-factor authentication controls across enterprises worldwide.

MILBERT is an agentic AI platform purpose-built to detect identity-based attacks that evade conventional security tools. The platform processes 218,000 authentication events per second and correlates session activity across Microsoft Azure AD, Okta, Google Workspace, and Duo to identify compromised sessions in real-time.

"MFA is not enough. Attackers have figured out how to steal authenticated sessions after users complete MFA challenges, and most security teams have zero visibility into this," said James McMurry, CEO of ThreatHunter.ai. "We built MILBERT to solve this problem, and we are giving our customers free access because they need this protection now."

AiTM attacks use reverse proxy infrastructure to intercept authentication flows in real-time. Users believe they are logging into legitimate services, but attackers capture session tokens after MFA succeeds. Tools like EVILGINX have made these attacks accessible to adversaries with basic technical skills, turning what was once advanced tradecraft into commodity attacks.

MILBERT detects these attacks by monitoring post-authentication session behavior rather than relying solely on authentication event analysis. The platform identifies session token replay from new infrastructure, concurrent session usage from multiple locations, device fingerprint changes mid-session, and behavioral anomalies indicating account compromise.

"Traditional security tools see a successful login and move on. MILBERT tracks what happens after authentication and catches attackers when they replay stolen sessions from their infrastructure," McMurry added. "We do this with zero false positives because alert fatigue kills security programs."

The 90-day free access includes full platform functionality, integration with major identity providers, real-time alerting via Slack, Microsoft Teams, and email, and dedicated onboarding support. Current ThreatHunter.ai customers can activate their trial at threathunter.ai/milbert-free-trial.