{"id":13778,"date":"2026-04-01T13:16:13","date_gmt":"2026-04-01T11:16:13","guid":{"rendered":"https:\/\/fortgale.com\/it\/protezione-phishing\/"},"modified":"2026-04-01T13:18:59","modified_gmt":"2026-04-01T11:18:59","slug":"protezione-phishing-aitm","status":"publish","type":"page","link":"https:\/\/fortgale.com\/it\/protezione-phishing-aitm\/","title":{"rendered":"Protezione-Phishing"},"content":{"rendered":"
\n \n
\n \n \n
\n \n
\n \n
\n \n
\n
\n \n \n
\n \n
\n \n
\n \n\n\n\n \n \n Protezione Phishing AiTM | M365 Phishing Interceptor \u2014 Fortgale<\/title>\n <meta name=\"description\" content=\"Blocca il phishing AiTM prima che le credenziali vengano inserite. Il Fortgale M365 Phishing Interceptor allerta gli utenti in tempo reale. Attivazione gratuita per Microsoft 365 e Google Workspace.\">\n <meta name=\"keywords\" content=\"protezione phishing aitm, adversary in the middle, phishing microsoft 365, m365 phishing interceptor, anti-phishing aziendale, credential protection, phishing google workspace, phishing intercept\">\n <meta name=\"robots\" content=\"index, follow\">\n <link rel=\"canonical\" href=\"https:\/\/fortgale.com\/it\/protezione-phishing-aitm\/\">\n\n <meta property=\"og:title\" content=\"Protezione Phishing AiTM \u2014 M365 Phishing Interceptor | Fortgale\">\n <meta property=\"og:description\" content=\"Attiva gratuitamente il Fortgale M365 Phishing Interceptor. Blocca gli attacchi AiTM prima che l'utente inserisca le credenziali su Microsoft 365 o Google Workspace.\">\n <meta property=\"og:type\" content=\"website\">\n <meta property=\"og:url\" content=\"https:\/\/fortgale.com\/it\/protezione-phishing-aitm\/\">\n <meta property=\"og:image\" content=\"https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2026\/03\/Copia-di-Servizi.png\">\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"WebPage\",\n \"name\": \"Protezione Phishing AiTM \u2014 M365 Phishing Interceptor | Fortgale\",\n \"url\": \"https:\/\/fortgale.com\/it\/protezione-phishing-aitm\/\",\n \"description\": \"Servizio di protezione anti-phishing AiTM con Fortgale M365 Phishing Interceptor. Allerta gli utenti nel momento in cui stanno per inserire le credenziali su pagine malevole che simulano Microsoft 365 o Google Workspace.\",\n \"inLanguage\": \"it-IT\",\n \"publisher\": {\n \"@type\": \"Organization\",\n \"name\": \"Fortgale\",\n \"url\": \"https:\/\/fortgale.com\/it\/\",\n \"logo\": \"https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2023\/02\/cropped-fortgale_logo.png\",\n \"address\": {\n \"@type\": \"PostalAddress\",\n \"streetAddress\": \"Via San Damiano 2\",\n \"addressLocality\": \"Milano\",\n \"addressCountry\": \"IT\"\n }\n }\n }\n <\/script>\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"FAQPage\",\n \"mainEntity\": [{\n \"@type\": \"Question\",\n \"name\": \"Cos'\u00e8 un attacco phishing AiTM?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"AiTM (Adversary in The Middle) \u00e8 una tecnica di phishing avanzata in cui l'attaccante interpone un proxy tra l'utente e il sito legittimo (es. Microsoft 365). In questo modo riesce a catturare non solo le credenziali, ma anche i token di sessione MFA, bypassando l'autenticazione a pi\u00f9 fattori. \u00c8 la tecnica dominante nelle campagne di phishing avanzato contro aziende europee.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Come funziona il Fortgale M365 Phishing Interceptor?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"L'Interceptor rileva in tempo reale i segnali caratteristici delle pagine di phishing AiTM \u2014 incluse quelle che superano il filtro MFA \u2014 e mostra un avviso immediato all'utente prima che inserisca le proprie credenziali. L'analisi avviene sul comportamento della pagina, non sul canale email, rendendo la protezione efficace anche quando il messaggio malevolo supera tutti i filtri tradizionali.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Il Phishing Interceptor bypassa la protezione MFA?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"No \u2014 al contrario: il Fortgale Interceptor \u00e8 progettato proprio per proteggere anche gli ambienti con MFA attivo. Gli attacchi AiTM moderni bypassa l'MFA catturando il token di sessione dopo l'autenticazione. L'Interceptor interviene prima, bloccando l'interazione con la pagina proxy malevola, impedendo che il token venga mai generato in contesto fraudolento.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Quanti settori proteggete con il Phishing Interceptor?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Fortgale utilizza il M365 Phishing Interceptor da anni in produzione su organizzazioni di settori eterogenei: banking e finanza, trasporto navale e marittimo, manifatturiero, healthcare, infrastrutture critiche, logistica e servizi professionali. Il phishing AiTM non discrimina per settore \u2014 attacca chiunque utilizzi Microsoft 365 o Google Workspace con credenziali di valore.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Come si attiva gratuitamente il Phishing Interceptor?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Contatta il team Fortgale dalla sezione contatti. Il team ti risponder\u00e0 entro 24 ore lavorative per avviare l'onboarding guidato. L'attivazione non richiede modifiche all'infrastruttura esistente e pu\u00f2 essere completata in poche ore.\"\n }\n }\n ]\n }\n <\/script>\n\n <link rel=\"preconnect\" href=\"https:\/\/fonts.googleapis.com\">\n <link rel=\"preconnect\" href=\"https:\/\/fonts.gstatic.com\" crossorigin=\"\">\n <link href=\"https:\/\/fonts.googleapis.com\/css2?family=Poppins:wght@300;400;500;600;700;800&display=swap\" rel=\"stylesheet\">\n\n <style>\n *,\n *::before,\n *::after {\n box-sizing: border-box;\n margin: 0;\n padding: 0;\n }\n\n :root {\n --navy: #001B3B;\n --navy-mid: #0A2250;\n --navy-btn: #303E7A;\n --navy-light: #1a2e5a;\n --white: #FFFFFF;\n --gray-light: #F2F2F2;\n --text-dark: #001B3B;\n --text-body: #2c3340;\n --text-muted: #65615f;\n --amber: #c9920a;\n --amber-light: #f5c842;\n --amber-glow: rgba(245, 200, 66, 0.15);\n --amber-dim: rgba(245, 200, 66, 0.55);\n }\n\n html {\n scroll-behavior: smooth;\n }\n\n body {\n font-family: 'Poppins', sans-serif;\n color: var(--text-body);\n background: var(--white);\n line-height: 1.7;\n font-size: 16px;\n }\n\n a {\n text-decoration: none;\n color: inherit;\n }\n\n img {\n max-width: 100%;\n display: block;\n }\n\n \/* \u2500\u2500\u2500 HERO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .hero {\n background: linear-gradient(to right, rgba(0, 27, 59, 0.96) 50%, rgba(0, 27, 59, 0.60) 100%), url('https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2026\/03\/Copia-di-Servizi.png') center\/cover no-repeat;\n min-height: 100vh;\n display: flex;\n align-items: center;\n position: relative;\n overflow: hidden;\n padding-top: 40px;\n }\n\n .hero-canvas {\n position: absolute;\n inset: 0;\n pointer-events: none;\n opacity: 0.15;\n }\n\n @keyframes pulse-ring {\n 0% {\n transform: scale(0.6);\n opacity: 0.9\n }\n 100% {\n transform: scale(2.4);\n opacity: 0\n }\n }\n\n @keyframes blink {\n 0%,\n 100% {\n opacity: 1\n }\n 50% {\n opacity: .3\n }\n }\n\n @keyframes float-warn {\n 0%,\n 100% {\n transform: translateY(0)\n }\n 50% {\n transform: translateY(-8px)\n }\n }\n\n .pulse-wrap {\n position: absolute;\n right: 18%;\n top: 42%;\n transform: translateY(-50%);\n pointer-events: none;\n }\n\n .pulse-core {\n width: 10px;\n height: 10px;\n background: var(--amber-light);\n border-radius: 50%;\n position: relative;\n z-index: 2;\n animation: blink 2.4s ease-in-out infinite;\n box-shadow: 0 0 12px var(--amber-light);\n }\n\n .pulse-ring {\n position: absolute;\n top: 50%;\n left: 50%;\n width: 10px;\n height: 10px;\n border-radius: 50%;\n border: 1.5px solid var(--amber-light);\n transform: translate(-50%, -50%);\n animation: pulse-ring 2.4s ease-out infinite;\n }\n\n .pulse-ring:nth-child(2) {\n animation-delay: .8s\n }\n\n .pulse-ring:nth-child(3) {\n animation-delay: 1.6s\n }\n\n .hero-alert-mock {\n position: absolute;\n right: 8%;\n top: 50%;\n transform: translateY(-50%);\n width: 300px;\n background: rgba(10, 20, 40, 0.92);\n border: 1px solid rgba(245, 200, 66, 0.3);\n border-radius: 12px;\n padding: 24px 26px;\n pointer-events: none;\n box-shadow: 0 20px 60px rgba(0, 0, 0, 0.5);\n animation: float-warn 4s ease-in-out infinite;\n z-index: 4;\n }\n\n .alert-bar {\n display: flex;\n align-items: center;\n gap: 8px;\n margin-bottom: 14px;\n }\n\n .alert-dot {\n width: 10px;\n height: 10px;\n border-radius: 50%;\n background: #e53e3e;\n flex-shrink: 0;\n box-shadow: 0 0 8px rgba(229, 62, 62, 0.6);\n animation: blink 1.4s ease-in-out infinite;\n }\n\n .alert-label {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n color: #e53e3e;\n }\n\n .alert-title {\n font-size: 15px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 8px;\n line-height: 1.35;\n }\n\n .alert-body {\n font-size: 12px;\n color: rgba(240, 246, 252, 0.6);\n line-height: 1.6;\n margin-bottom: 16px;\n }\n\n .alert-btn {\n display: block;\n width: 100%;\n text-align: center;\n background: var(--amber-light);\n color: var(--navy);\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 10px;\n border-radius: 6px;\n }\n\n .alert-url {\n margin-top: 10px;\n font-size: 10px;\n color: rgba(240, 246, 252, 0.3);\n text-align: center;\n word-break: break-all;\n }\n\n .hero-content {\n position: relative;\n z-index: 3;\n padding: 80px 80px 120px;\n max-width: 660px;\n }\n\n .hero-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 600;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n color: var(--amber-light);\n border: 1px solid rgba(245, 200, 66, 0.35);\n padding: 5px 14px;\n border-radius: 3px;\n margin-bottom: 28px;\n }\n\n .hero h1 {\n font-size: clamp(34px, 3.8vw, 52px);\n font-weight: 800;\n color: var(--white);\n line-height: 1.13;\n margin-bottom: 24px;\n letter-spacing: -0.02em;\n }\n\n .hero h1 span {\n color: var(--amber-light);\n }\n\n .hero-subtitle {\n font-size: 17px;\n font-weight: 400;\n color: rgba(240, 246, 252, 0.72);\n line-height: 1.75;\n margin-bottom: 40px;\n max-width: 540px;\n }\n\n .hero-ctas {\n display: flex;\n gap: 16px;\n flex-wrap: wrap;\n }\n\n .hero-bottom {\n position: absolute;\n bottom: 36px;\n left: 80px;\n display: flex;\n gap: 48px;\n }\n\n .hero-stat-value {\n font-size: 30px;\n font-weight: 800;\n color: var(--white);\n line-height: 1;\n }\n\n .hero-stat-value.accent {\n color: var(--amber-light);\n }\n\n .hero-stat-label {\n font-size: 11px;\n font-weight: 500;\n color: rgba(240, 246, 252, 0.5);\n text-transform: uppercase;\n letter-spacing: 0.08em;\n margin-top: 4px;\n }\n\n \/* \u2500\u2500\u2500 BUTTONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .btn-primary {\n background: var(--navy-btn);\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid var(--navy-btn);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-primary:hover {\n background: #253070;\n border-color: #253070;\n transform: translateY(-1px);\n box-shadow: 0 6px 20px rgba(0, 0, 0, .25);\n }\n\n .btn-amber {\n background: transparent;\n color: var(--amber-light);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(245, 200, 66, 0.5);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-amber:hover {\n border-color: var(--amber-light);\n background: rgba(245, 200, 66, 0.06);\n }\n\n .btn-amber-solid {\n background: var(--amber-light);\n color: var(--navy);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 700;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid var(--amber-light);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-amber-solid:hover {\n background: #e8b830;\n border-color: #e8b830;\n transform: translateY(-1px);\n box-shadow: 0 6px 24px rgba(245, 200, 66, .3);\n }\n\n .btn-secondary {\n background: transparent;\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(255, 255, 255, 0.4);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-secondary:hover {\n border-color: var(--white);\n background: rgba(255, 255, 255, 0.07);\n }\n\n \/* \u2500\u2500\u2500 GENERAL \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .section {\n padding: 96px 80px;\n }\n\n .section-narrow {\n max-width: 1200px;\n margin: 0 auto;\n }\n\n .section-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--navy-btn);\n margin-bottom: 16px;\n }\n\n .section-tag-amber {\n color: var(--amber-dim);\n }\n\n .section-tag-light {\n color: rgba(245, 200, 66, 0.7);\n }\n\n .section h2 {\n font-size: clamp(26px, 2.8vw, 38px);\n font-weight: 800;\n color: var(--text-dark);\n line-height: 1.2;\n letter-spacing: -0.02em;\n margin-bottom: 20px;\n }\n\n .section-dark h2 {\n color: var(--white);\n }\n\n .section-lead {\n font-size: 17px;\n color: var(--text-muted);\n max-width: 700px;\n line-height: 1.75;\n margin-bottom: 56px;\n }\n\n .section-dark .section-lead {\n color: rgba(240, 246, 252, 0.68);\n }\n\n .section-dark {\n background: var(--navy);\n color: var(--white);\n }\n\n .section-alt {\n background: var(--gray-light);\n }\n\n .section-ink {\n background: #040d1a;\n }\n\n \/* \u2500\u2500\u2500 FREE BANNER \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .interceptor-banner {\n background: linear-gradient(135deg, var(--navy-mid) 0%, #0d1f47 100%);\n border: 1px solid rgba(245, 200, 66, 0.2);\n border-radius: 16px;\n padding: 52px 56px;\n position: relative;\n overflow: hidden;\n }\n\n .interceptor-banner::before {\n content: '';\n position: absolute;\n top: -60px;\n right: -60px;\n width: 280px;\n height: 280px;\n background: radial-gradient(circle, rgba(245, 200, 66, 0.1) 0%, transparent 70%);\n border-radius: 50%;\n }\n\n .interceptor-banner>* {\n position: relative;\n z-index: 1;\n }\n\n .free-badge {\n display: inline-flex;\n align-items: center;\n gap: 8px;\n background: rgba(245, 200, 66, 0.12);\n border: 1px solid rgba(245, 200, 66, 0.35);\n border-radius: 40px;\n padding: 6px 18px;\n margin-bottom: 22px;\n }\n\n .free-badge-dot {\n width: 7px;\n height: 7px;\n background: var(--amber-light);\n border-radius: 50%;\n animation: blink 2s ease-in-out infinite;\n }\n\n .free-badge span {\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n color: var(--amber-light);\n }\n\n .interceptor-banner h3 {\n font-size: clamp(24px, 2.6vw, 34px);\n font-weight: 800;\n color: var(--white);\n line-height: 1.2;\n letter-spacing: -0.02em;\n margin-bottom: 16px;\n }\n\n .interceptor-banner h3 span {\n color: var(--amber-light);\n }\n\n .interceptor-banner p {\n font-size: 16px;\n color: rgba(240, 246, 252, 0.7);\n line-height: 1.75;\n max-width: 620px;\n margin-bottom: 32px;\n }\n\n .banner-ctas {\n display: flex;\n gap: 16px;\n flex-wrap: wrap;\n }\n\n \/* \u2500\u2500\u2500 STEPS FLOW \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .steps-flow {\n display: grid;\n grid-template-columns: repeat(4, 1fr);\n gap: 0;\n margin-top: 52px;\n position: relative;\n }\n\n .steps-flow::before {\n content: '';\n position: absolute;\n top: 28px;\n left: calc(12.5% + 28px);\n right: calc(12.5% + 28px);\n height: 2px;\n background: linear-gradient(90deg, var(--amber-light), rgba(245, 200, 66, 0.2));\n z-index: 0;\n }\n\n .step {\n text-align: center;\n padding: 0 20px;\n position: relative;\n z-index: 1;\n }\n\n .step-num {\n width: 56px;\n height: 56px;\n border-radius: 50%;\n margin: 0 auto 20px;\n background: var(--navy);\n border: 2px solid var(--amber-light);\n display: flex;\n align-items: center;\n justify-content: center;\n font-size: 18px;\n font-weight: 800;\n color: var(--amber-light);\n }\n\n .step-num.danger {\n border-color: #e53e3e;\n color: #e53e3e;\n }\n\n .step-num.safe {\n border-color: #48bb78;\n color: #48bb78;\n }\n\n .step h4 {\n font-size: 15px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 10px;\n line-height: 1.3;\n }\n\n .step p {\n font-size: 13px;\n color: rgba(240, 246, 252, 0.58);\n line-height: 1.65;\n }\n\n \/* \u2500\u2500\u2500 PILLARS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .pillars {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 2px;\n margin-top: 56px;\n }\n\n .pillar {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.07);\n padding: 44px 36px;\n position: relative;\n transition: background .3s;\n }\n\n .pillar:hover {\n background: rgba(255, 255, 255, 0.06);\n }\n\n .pillar-num {\n font-size: 56px;\n font-weight: 800;\n color: rgba(245, 200, 66, 0.12);\n line-height: 1;\n margin-bottom: 20px;\n letter-spacing: -0.04em;\n }\n\n .pillar h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 14px;\n line-height: 1.3;\n }\n\n .pillar p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.75;\n }\n\n .pillar-line {\n position: absolute;\n top: 0;\n left: 0;\n width: 3px;\n height: 0;\n background: var(--amber-light);\n transition: height .4s ease;\n }\n\n .pillar:hover .pillar-line {\n height: 100%;\n }\n\n \/* \u2500\u2500\u2500 AITM DEEP DIVE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .two-col {\n display: grid;\n grid-template-columns: 1fr 1fr;\n gap: 64px;\n align-items: center;\n }\n\n .feature-list {\n display: flex;\n flex-direction: column;\n gap: 28px;\n margin-top: 36px;\n }\n\n .feature-item {\n display: flex;\n gap: 20px;\n align-items: flex-start;\n }\n\n .feature-num {\n width: 36px;\n height: 36px;\n flex-shrink: 0;\n border-radius: 6px;\n background: rgba(245, 200, 66, 0.12);\n color: var(--amber-light);\n font-size: 13px;\n font-weight: 700;\n display: flex;\n align-items: center;\n justify-content: center;\n border: 1px solid rgba(245, 200, 66, 0.25);\n }\n\n .feature-text h4 {\n font-size: 15px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 5px;\n }\n\n .feature-text p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.68;\n }\n\n .aitm-box {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.09);\n border-radius: 14px;\n padding: 40px;\n position: relative;\n overflow: hidden;\n }\n\n .aitm-box::after {\n content: '';\n position: absolute;\n bottom: -40px;\n right: -40px;\n width: 180px;\n height: 180px;\n border-radius: 50%;\n background: radial-gradient(circle, rgba(229, 62, 62, 0.07) 0%, transparent 70%);\n }\n\n .aitm-diagram {\n display: flex;\n flex-direction: column;\n gap: 0;\n }\n\n .aitm-row {\n display: flex;\n align-items: center;\n gap: 0;\n padding: 16px 0;\n border-bottom: 1px solid rgba(255, 255, 255, 0.06);\n }\n\n .aitm-row:last-child {\n border-bottom: none;\n }\n\n .aitm-icon-wrap {\n width: 44px;\n height: 44px;\n border-radius: 8px;\n flex-shrink: 0;\n display: flex;\n align-items: center;\n justify-content: center;\n font-size: 20px;\n margin-right: 16px;\n }\n\n .aitm-icon-wrap.legit {\n background: rgba(72, 187, 120, 0.12);\n border: 1px solid rgba(72, 187, 120, 0.25);\n }\n\n .aitm-icon-wrap.evil {\n background: rgba(229, 62, 62, 0.12);\n border: 1px solid rgba(229, 62, 62, 0.25);\n }\n\n .aitm-icon-wrap.shield {\n background: rgba(245, 200, 66, 0.12);\n border: 1px solid rgba(245, 200, 66, 0.25);\n }\n\n .aitm-info h5 {\n font-size: 14px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 3px;\n }\n\n .aitm-info p {\n font-size: 12px;\n color: rgba(240, 246, 252, 0.52);\n line-height: 1.5;\n }\n\n .aitm-arrow {\n margin: 0 12px;\n font-size: 18px;\n color: rgba(255, 255, 255, 0.2);\n flex-shrink: 0;\n }\n\n \/* \u2500\u2500\u2500 STATS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .stats-row {\n display: grid;\n grid-template-columns: repeat(4, 1fr);\n gap: 24px;\n margin-top: 48px;\n }\n\n .stat-box {\n text-align: center;\n padding: 36px 20px;\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.08);\n border-radius: 10px;\n }\n\n .stat-box:hover {\n background: rgba(255, 255, 255, 0.06);\n border-color: rgba(245, 200, 66, 0.25);\n }\n\n .stat-value {\n font-size: 40px;\n font-weight: 800;\n color: var(--amber-light);\n line-height: 1;\n margin-bottom: 8px;\n }\n\n .stat-label {\n font-size: 12px;\n font-weight: 600;\n text-transform: uppercase;\n letter-spacing: 0.1em;\n color: rgba(240, 246, 252, 0.45);\n }\n\n .stat-desc {\n font-size: 13px;\n color: rgba(240, 246, 252, 0.55);\n margin-top: 10px;\n line-height: 1.5;\n }\n\n \/* \u2500\u2500\u2500 SECTORS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .sectors-row {\n display: flex;\n flex-wrap: wrap;\n gap: 12px;\n margin-top: 40px;\n }\n\n .sector-chip {\n display: inline-flex;\n align-items: center;\n gap: 8px;\n background: rgba(255, 255, 255, 0.04);\n border: 1px solid rgba(255, 255, 255, 0.1);\n border-radius: 6px;\n padding: 10px 18px;\n font-size: 13px;\n font-weight: 600;\n color: rgba(240, 246, 252, 0.75);\n transition: background .25s, border-color .25s;\n }\n\n .sector-chip:hover {\n background: rgba(255, 255, 255, 0.08);\n border-color: rgba(245, 200, 66, 0.3);\n color: var(--white);\n }\n\n .sector-chip-icon {\n font-size: 15px;\n }\n\n \/* \u2500\u2500\u2500 CROSSLINK \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .crosslink-bar {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(245, 200, 66, 0.2);\n border-radius: 12px;\n padding: 32px 40px;\n display: flex;\n align-items: center;\n justify-content: space-between;\n gap: 24px;\n flex-wrap: wrap;\n margin-top: 56px;\n }\n\n .crosslink-text h4 {\n font-size: 17px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 6px;\n }\n\n .crosslink-text p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.55);\n line-height: 1.6;\n max-width: 540px;\n }\n\n .crosslink-tag {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--amber-light);\n margin-bottom: 8px;\n }\n\n \/* \u2500\u2500\u2500 SERVICES GRID \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .services-grid {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 28px;\n margin-top: 52px;\n }\n\n .service-card {\n background: var(--white);\n border-radius: 10px;\n padding: 36px 30px;\n box-shadow: 0 2px 24px rgba(0, 27, 59, 0.07);\n border-bottom: 4px solid transparent;\n transition: border-color .25s, transform .25s, box-shadow .25s;\n }\n\n .service-card:hover {\n border-color: var(--navy-btn);\n transform: translateY(-4px);\n box-shadow: 0 8px 36px rgba(0, 27, 59, 0.13);\n }\n\n .service-card-tag {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--navy-btn);\n margin-bottom: 14px;\n }\n\n .service-card h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--text-dark);\n margin-bottom: 12px;\n line-height: 1.3;\n }\n\n .service-card p {\n font-size: 14px;\n color: var(--text-muted);\n line-height: 1.7;\n margin-bottom: 22px;\n }\n\n .service-card a {\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n color: var(--navy-btn);\n border-bottom: 1.5px solid var(--navy-btn);\n padding-bottom: 2px;\n transition: opacity .2s;\n }\n\n .service-card a:hover {\n opacity: .7;\n }\n\n \/* \u2500\u2500\u2500 FAQ \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .faq-list {\n display: flex;\n flex-direction: column;\n margin-top: 48px;\n border-top: 1px solid rgba(0, 27, 59, 0.1);\n }\n\n .faq-item {\n border-bottom: 1px solid rgba(0, 27, 59, 0.1);\n }\n\n .faq-question {\n width: 100%;\n text-align: left;\n background: none;\n border: none;\n cursor: pointer;\n padding: 24px 0;\n display: flex;\n justify-content: space-between;\n align-items: center;\n gap: 20px;\n font-family: 'Poppins', sans-serif;\n font-size: 15px;\n font-weight: 600;\n color: var(--text-dark);\n }\n\n .faq-question:hover {\n color: var(--navy-btn);\n }\n\n .faq-icon {\n flex-shrink: 0;\n width: 28px;\n height: 28px;\n border-radius: 50%;\n border: 1.5px solid var(--navy-btn);\n display: flex;\n align-items: center;\n justify-content: center;\n color: var(--navy-btn);\n font-size: 18px;\n font-weight: 300;\n transition: transform .25s;\n }\n\n .faq-item.open .faq-icon {\n transform: rotate(45deg);\n }\n\n .faq-answer {\n display: none;\n padding: 0 0 24px;\n font-size: 14.5px;\n color: var(--text-muted);\n line-height: 1.75;\n }\n\n .faq-item.open .faq-answer {\n display: block;\n }\n\n \/* \u2500\u2500\u2500 CTA \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .cta-section {\n background: var(--navy-mid);\n padding: 88px 80px;\n text-align: center;\n position: relative;\n overflow: hidden;\n }\n\n .cta-section::before {\n content: '';\n position: absolute;\n top: -80px;\n right: -80px;\n width: 400px;\n height: 400px;\n background: rgba(48, 62, 122, 0.4);\n border-radius: 50%;\n }\n\n .cta-section::after {\n content: '';\n position: absolute;\n bottom: -60px;\n left: -60px;\n width: 280px;\n height: 280px;\n background: rgba(48, 62, 122, 0.3);\n border-radius: 50%;\n }\n\n .cta-section>* {\n position: relative;\n z-index: 1;\n }\n\n .cta-section h2 {\n font-size: clamp(28px, 3vw, 42px);\n font-weight: 800;\n color: var(--white);\n margin-bottom: 18px;\n letter-spacing: -0.02em;\n }\n\n .cta-section p {\n font-size: 16px;\n color: rgba(240, 246, 252, 0.7);\n margin-bottom: 40px;\n max-width: 560px;\n margin-left: auto;\n margin-right: auto;\n line-height: 1.7;\n }\n\n .cta-buttons {\n display: flex;\n gap: 16px;\n justify-content: center;\n flex-wrap: wrap;\n }\n\n \/* \u2500\u2500\u2500 RESPONSIVE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n @media(max-width:1024px) {\n .section {\n padding: 72px 40px\n }\n .hero-content {\n padding: 80px 40px 120px\n }\n .pillars {\n grid-template-columns: 1fr;\n gap: 2px\n }\n .steps-flow {\n grid-template-columns: 1fr 1fr;\n gap: 28px\n }\n .steps-flow::before {\n display: none\n }\n .stats-row {\n grid-template-columns: repeat(2, 1fr)\n }\n .services-grid {\n grid-template-columns: 1fr 1fr\n }\n .two-col {\n grid-template-columns: 1fr;\n gap: 32px\n }\n .hero-alert-mock {\n display: none\n }\n .cta-section {\n padding: 72px 40px\n }\n }\n\n @media(max-width:768px) {\n .section {\n padding: 56px 24px\n }\n .hero-content {\n padding: 80px 24px 140px;\n max-width: 100%\n }\n .pulse-wrap {\n display: none\n }\n .services-grid {\n grid-template-columns: 1fr\n }\n .steps-flow {\n grid-template-columns: 1fr\n }\n .stats-row {\n grid-template-columns: 1fr 1fr\n }\n .cta-section {\n padding: 56px 24px\n }\n .hero-bottom {\n left: 24px;\n gap: 24px;\n bottom: 24px\n }\n .interceptor-banner {\n padding: 36px 28px\n }\n .crosslink-bar {\n flex-direction: column\n }\n }\n <\/style>\n\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 HERO \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"hero\">\n <svg class=\"hero-canvas\" viewBox=\"0 0 1440 900\" preserveAspectRatio=\"xMidYMid slice\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n <line x1=\"0\" y1=\"150\" x2=\"1440\" y2=\"150\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"300\" x2=\"1440\" y2=\"300\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"450\" x2=\"1440\" y2=\"450\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"600\" x2=\"1440\" y2=\"600\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"240\" y1=\"0\" x2=\"240\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"480\" y1=\"0\" x2=\"480\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"720\" y1=\"0\" x2=\"720\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"960\" y1=\"0\" x2=\"960\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"1200\" y1=\"0\" x2=\"1200\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"860\" y1=\"180\" x2=\"1100\" y2=\"380\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <line x1=\"1100\" y1=\"380\" x2=\"1020\" y2=\"560\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <circle cx=\"860\" cy=\"180\" r=\"4\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1100\" cy=\"380\" r=\"4\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1020\" cy=\"560\" r=\"3\" fill=\"#f5c842\"><\/circle>\n <rect x=\"0\" y=\"0\" width=\"520\" height=\"900\" fill=\"url(#fadeLeft)\"><\/rect>\n <defs>\n <linearGradient id=\"fadeLeft\" x1=\"0\" x2=\"1\" y1=\"0\" y2=\"0\">\n <stop offset=\"0%\" stop-color=\"#001B3B\" stop-opacity=\"1\"><\/stop>\n <stop offset=\"100%\" stop-color=\"#001B3B\" stop-opacity=\"0\"><\/stop>\n <\/linearGradient>\n <\/defs>\n <\/svg>\n <div class=\"pulse-wrap\">\n <div class=\"pulse-core\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <\/div>\n <div class=\"hero-alert-mock\">\n <div class=\"alert-bar\">\n <div class=\"alert-dot\"><\/div><span class=\"alert-label\">Fortgale Interceptor \u2014 Allerta Attiva<\/span><\/div>\n <div class=\"alert-title\">\u26a0\ufe0f Attacco AiTM rilevato<\/div>\n <div class=\"alert-body\">Questa pagina utilizza un proxy per intercettare le tue credenziali e il token MFA. Non inserire dati.<\/div>\n <div class=\"alert-btn\">Blocca e segnala<\/div>\n <div class=\"alert-url\">hxxps:\/\/m1cr0s0ft-login[.]verify-token[.]net\/aitm\/…<\/div>\n <\/div>\n <div class=\"hero-content\">\n <span class=\"hero-tag\">AiTM \u00b7 Adversary in The Middle \u00b7 M365 \u00b7 Google Workspace<\/span>\n <h1>Il phishing moderno\n <br>bypassa l’MFA.\n <br><span>L’Interceptor no.<\/span><\/h1>\n <p class=\"hero-subtitle\">\n Gli attacchi AiTM non rubano solo le credenziali: catturano il token di sessione dopo l’autenticazione, rendendo inutile l’MFA. Fortgale blocca l’attacco prima che l’utente interagisca con il proxy malevolo.\n <\/p>\n <div class=\"hero-ctas\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Attiva gratuitamente l’Interceptor<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/protezione-identita\/\" class=\"btn-secondary\">Scopri il servizio ITDR \u2192<\/a>\n <\/div>\n <\/div>\n <div class=\"hero-bottom\">\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">91%<\/div>\n <div class=\"hero-stat-label\">degli attacchi inizia\n <br>con phishing<\/div>\n <\/div>\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">5+<\/div>\n <div class=\"hero-stat-label\">anni di protezione operativa\n <br>in produzione<\/div>\n <\/div>\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">0<\/div>\n <div class=\"hero-stat-label\">credenziali compromesse\n <br>sui clienti protetti<\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 OFFERTA GRATUITA \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-alt\">\n <div class=\"section-narrow\">\n <div class=\"interceptor-banner\">\n <div class=\"free-badge\"><span class=\"free-badge-dot\"><\/span><span>Attivazione gratuita \u00b7 Disponibile ora<\/span><\/div>\n <h3>Fortgale <span>M365 Phishing Interceptor<\/span>\n <br>\u2014 attivalo senza costi.<\/h3>\n <p>Uno strumento collaudato da anni su aziende di ogni settore \u2014 dal bancario al trasporto navale \u2014 ora disponibile gratuitamente. Protegge gli utenti Microsoft 365 e Google Workspace nel momento esatto in cui stanno per cedere\n le proprie credenziali a una pagina di phishing AiTM.<\/p>\n <div class=\"banner-ctas\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Richiedi l’attivazione gratuita<\/a>\n <a href=\"#come-funziona\" class=\"btn-secondary\">Come funziona \u2192<\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 COSA \u00c8 AITM \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">La minaccia<\/span>\n <h2>AiTM: il phishing che bypassa\n <br>l’autenticazione a pi\u00f9 fattori.<\/h2>\n <p class=\"section-lead\">\n I filtri email bloccano il phishing tradizionale. Gli attaccanti lo sanno. Le campagne AiTM (Adversary in The Middle) sono progettate per superare ogni difesa perimetrale \u2014 inclusa l’MFA \u2014 e colpire direttamente le sessioni cloud.\n <\/p>\n <div class=\"two-col\">\n <div class=\"feature-list\">\n <div class=\"feature-item\">\n <div class=\"feature-num\">01<\/div>\n <div class=\"feature-text\">\n <h4>Proxy trasparente tra utente e Microsoft<\/h4>\n <p>L’attaccante non imita il sito: lo usa come proxy. L’utente vede la pagina Microsoft reale, inserisce credenziali e MFA reali \u2014 che vengono intercettati in transito.<\/p>\n <\/div>\n <\/div>\n <div class=\"feature-item\">\n <div class=\"feature-num\">02<\/div>\n <div class=\"feature-text\">\n <h4>Furto del token di sessione post-MFA<\/h4>\n <p>Una volta completata l’autenticazione, il proxy cattura il session cookie. L’attaccante lo riusa per accedere all’account senza credenziali n\u00e9 MFA, direttamente da browser.<\/p>\n <\/div>\n <\/div>\n <div class=\"feature-item\">\n <div class=\"feature-num\">03<\/div>\n <div class=\"feature-text\">\n <h4>Invisibile ai filtri email tradizionali<\/h4>\n <p>Il link nel messaggio di phishing punta a un dominio non ancora classificato come malevolo. I filtri email, SEG e sandbox non lo bloccano: l’email viene consegnata regolarmente.<\/p>\n <\/div>\n <\/div>\n <div class=\"feature-item\">\n <div class=\"feature-num\">04<\/div>\n <div class=\"feature-text\">\n <h4>Kit pronti, barriera tecnica minima<\/h4>\n <p>Framework AiTM come Evilginx, Modlishka e Muraena sono open source e documentati. Chiunque con competenze minime pu\u00f2 lanciare campagne AiTM sofisticate contro M365 in poche ore.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <div class=\"aitm-box\">\n <div style=\"font-size:12px;font-weight:700;letter-spacing:0.15em;text-transform:uppercase;color:rgba(245,200,66,0.6);margin-bottom:24px;\">Anatomia di un attacco AiTM<\/div>\n <div class=\"aitm-diagram\">\n <div class=\"aitm-row\">\n <div class=\"aitm-icon-wrap evil\">\ud83d\udce7<\/div>\n <div class=\"aitm-info\">\n <h5>Email di phishing<\/h5>\n <p>Link a dominio lookalike non ancora classificato come malevolo<\/p>\n <\/div>\n <\/div>\n <div class=\"aitm-row\">\n <div class=\"aitm-icon-wrap evil\">\ud83d\udd78\ufe0f<\/div>\n <div class=\"aitm-info\">\n <h5>Proxy AiTM attivato<\/h5>\n <p>Il browser dell’utente comunica con il proxy, non con Microsoft<\/p>\n <\/div>\n <\/div>\n <div class=\"aitm-row\">\n <div class=\"aitm-icon-wrap evil\">\ud83d\udd11<\/div>\n <div class=\"aitm-info\">\n <h5>Credenziali + MFA catturati<\/h5>\n <p>Il proxy intercetta tutto in tempo reale, incluso il token OTP<\/p>\n <\/div>\n <\/div>\n <div class=\"aitm-row\">\n <div class=\"aitm-icon-wrap evil\">\ud83c\udf6a<\/div>\n <div class=\"aitm-info\">\n <h5>Session token rubato<\/h5>\n <p>L’attaccante ottiene il cookie di sessione e accede all’account<\/p>\n <\/div>\n <\/div>\n <div class=\"aitm-row\" style=\"border-bottom:none;\">\n <div class=\"aitm-icon-wrap shield\">\ud83d\udee1\ufe0f<\/div>\n <div class=\"aitm-info\">\n <h5>Fortgale Interceptor<\/h5>\n <p style=\"color:rgba(245,200,66,0.7);\">Blocca l’utente prima del passo 1 \u2014 nessun dato viene mai trasmesso<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 COME FUNZIONA \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\" style=\"padding-top:0;\" id=\"come-funziona\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Il meccanismo di protezione<\/span>\n <h2>Intercetta l’attacco prima\n <br>dell’inserimento delle credenziali.<\/h2>\n <p class=\"section-lead\">\n La finestra di vulnerabilit\u00e0 dura pochi secondi: il tempo in cui l’utente compila il form. Il Fortgale Interceptor opera esattamente in quel momento \u2014 prima che qualsiasi dato venga trasmesso al proxy malevolo.\n <\/p>\n <div class=\"steps-flow\">\n <div class=\"step\">\n <div class=\"step-num\">01<\/div>\n <h4>Email di phishing recapitata<\/h4>\n <p>Il messaggio supera i filtri. Il link punta a un dominio proxy AiTM costruito ad hoc. L’utente non ha segnali visivi di allarme.<\/p>\n <\/div>\n <div class=\"step\">\n <div class=\"step-num danger\">02<\/div>\n <h4>Pagina proxy aperta<\/h4>\n <p>L’utente vede la pagina Microsoft o Google autentica \u2014 perch\u00e9 il proxy la serve in tempo reale. Visivamente indistinguibile dal sito legittimo.<\/p>\n <\/div>\n <div class=\"step\">\n <div class=\"step-num\">03<\/div>\n <h4>Interceptor rileva il proxy<\/h4>\n <p>Prima di qualsiasi input, l’Interceptor analizza i segnali caratteristici del proxy AiTM: header anomali, comportamento della sessione, fingerprint della pagina.<\/p>\n <\/div>\n <div class=\"step\">\n <div class=\"step-num safe\">04<\/div>\n <h4>Allerta \u2014 attacco neutralizzato<\/h4>\n <p>L’utente riceve un avviso immediato e chiaro. Nessuna credenziale viene inserita. Nessun token viene generato in contesto malevolo. L’attacco \u00e8 bloccato.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 PERCH\u00c9 FUNZIONA \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\" style=\"padding-top:0;\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Perch\u00e9 \u00e8 efficace contro AiTM<\/span>\n <h2>Non filtra l’email.\n <br>Protegge dove i filtri tradizionali falliscono.<\/h2>\n <div class=\"pillars\">\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">01<\/div>\n <h3>Protezione comportamentale<\/h3>\n <p>Agisce sul comportamento della pagina di destinazione, non sul canale di consegna. Efficace anche quando l’email supera SEG, sandbox e filtri DNS.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">02<\/div>\n <h3>MFA-proof by design<\/h3>\n <p>Progettato specificamente per gli attacchi AiTM che bypassano l’MFA. Interviene prima che il token venga generato in contesto fraudolento \u2014 rendendo il furto impossibile.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">03<\/div>\n <h3>Nessuna modifica infrastrutturale<\/h3>\n <p>L’attivazione non tocca la configurazione DNS, i server di posta o il tenant M365. L’onboarding guidato Fortgale si completa in poche ore.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">04<\/div>\n <h3>Copertura M365 e Google Workspace<\/h3>\n <p>Protezione nativa sui portali Microsoft 365, Entra ID e Google Workspace \u2014 i target primari delle campagne AiTM attive in Europa.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">05<\/div>\n <h3>Intelligence aggiornata in real-time<\/h3>\n <p>Il database di rilevamento \u00e8 alimentato dall’intelligence Fortgale generata da incidenti reali. Ogni nuova campagna identificata rafforza la protezione di tutti i clienti.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">06<\/div>\n <h3>Visibilit\u00e0 e reporting centralizzato<\/h3>\n <p>Dashboard completa: quanti attacchi AiTM intercettati, quali utenti coinvolti, quali proxy utilizzati dagli attaccanti, con timeline e dettagli per ogni evento.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 SETTORI \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-ink\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Track record operativo<\/span>\n <h2>Cinque anni di protezione operativa.\n <br>In ogni settore.<\/h2>\n <p class=\"section-lead\">\n Il Fortgale M365 Phishing Interceptor \u00e8 in produzione da anni su organizzazioni di settori eterogenei. Gli attacchi AiTM non scelgono per industria: colpiscono chiunque utilizzi Microsoft 365 o Google Workspace con credenziali di valore.\n <\/p>\n <div class=\"stats-row\">\n <div class=\"stat-box\">\n <div class=\"stat-value\">\ud83c\udfe6<\/div>\n <div class=\"stat-label\">Banking & Finance<\/div>\n <div class=\"stat-desc\">Campagne AiTM mirate a portali M365 di istituti finanziari per accesso a sistemi di pagamento e dati clienti.<\/div>\n <\/div>\n <div class=\"stat-box\">\n <div class=\"stat-value\">\u2693<\/div>\n <div class=\"stat-label\">Trasporto Navale<\/div>\n <div class=\"stat-desc\">Phishing BEC e AiTM verso compagnie di shipping per dirottamento di bonifici e accesso a sistemi operativi.<\/div>\n <\/div>\n <div class=\"stat-box\">\n <div class=\"stat-value\">\ud83c\udfed<\/div>\n <div class=\"stat-label\">Manifatturiero<\/div>\n <div class=\"stat-desc\">Spear-phishing di filiera verso ambienti M365 ibridi per accesso a dati di produzione e supply chain.<\/div>\n <\/div>\n <div class=\"stat-box\">\n <div class=\"stat-value\">\u26a1<\/div>\n <div class=\"stat-label\">Infrastrutture Critiche<\/div>\n <div class=\"stat-desc\">Operatori NIS2 con requisiti di protezione delle identit\u00e0 certificabile e reportistica auditabile.<\/div>\n <\/div>\n <\/div>\n <div class=\"sectors-row\">\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\ud83c\udfe6<\/span>Banking & Finance<\/div>\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\u2693<\/span>Shipping & Logistica<\/div>\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\ud83c\udfed<\/span>Manifatturiero<\/div>\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\ud83c\udfe5<\/span>Healthcare<\/div>\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\u26a1<\/span>Energy & Utilities<\/div>\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\u2696\ufe0f<\/span>Legal & Professional<\/div>\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\ud83d\uded2<\/span>Retail & GDO<\/div>\n <div class=\"sector-chip\"><span class=\"sector-chip-icon\">\ud83c\udfd7\ufe0f<\/span>Construction<\/div>\n <\/div>\n\n <!-- Cross-link ITDR -->\n <div class=\"crosslink-bar\">\n <div>\n <div class=\"crosslink-tag\">Servizio correlato \u00b7 Protezione Identit\u00e0<\/div>\n <div class=\"crosslink-text\">\n <h4>L’Interceptor blocca l’attacco. L’ITDR gestisce l’identit\u00e0 a 360\u00b0.<\/h4>\n <p>Se un’identit\u00e0 viene comunque compromessa \u2014 o se vuoi proteggere l’intero ciclo di vita delle identit\u00e0 aziendali dall’Active Directory al Cloud \u2014 scopri il servizio ITDR di Fortgale.<\/p>\n <\/div>\n <\/div>\n <a href=\"https:\/\/fortgale.com\/it\/protezione-identita\/\" class=\"btn-amber\" style=\"flex-shrink:0;\">Scopri l’ITDR \u2192<\/a>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 FAQ \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">Domande frequenti<\/span>\n <h2>Tutto quello che devi\n <br>sapere sugli attacchi AiTM e l’Interceptor.<\/h2>\n <div class=\"faq-list\">\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Cos’\u00e8 un attacco phishing AiTM?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">AiTM (Adversary in The Middle) \u00e8 una tecnica di phishing avanzata in cui l’attaccante interpone un proxy trasparente tra l’utente e il sito legittimo (es. Microsoft 365). In questo modo riesce a catturare non solo le credenziali\n ma anche i token di sessione MFA, bypassando l’autenticazione a pi\u00f9 fattori. \u00c8 la tecnica dominante nelle campagne di phishing avanzato contro aziende europee, implementata con framework open source come Evilginx, Modlishka\n e Muraena.<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Come funziona il Fortgale M365 Phishing Interceptor contro AiTM?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">L’Interceptor rileva in tempo reale i segnali caratteristici delle pagine proxy AiTM \u2014 incluse quelle che emulano perfettamente l’interfaccia Microsoft \u2014 e mostra un avviso immediato all’utente prima che inserisca le proprie\n credenziali. L’analisi avviene sul comportamento della pagina e della sessione, non sul canale email, rendendo la protezione efficace anche quando l’email malevola supera tutti i filtri tradizionali.<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Perch\u00e9 l’MFA non \u00e8 sufficiente contro gli attacchi AiTM?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">L’MFA protegge le credenziali statiche (username e password), ma non il session token generato dopo l’autenticazione. In un attacco AiTM, il proxy riceve il token di sessione valido \u2014 dopo che l’utente ha completato anche il\n secondo fattore \u2014 e lo riusa per accedere all’account in modo autonomo. L’MFA \u00e8 stato superato non perch\u00e9 sia debole, ma perch\u00e9 l’attacco avviene a valle del processo di autenticazione. L’Interceptor interviene prima, bloccando\n l’interazione con il proxy.<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Il Phishing Interceptor funziona anche con Google Workspace?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">S\u00ec. Fortgale estende la protezione anche agli ambienti Google Workspace. Le campagne AiTM contro Google sono in crescita soprattutto nei settori manifatturiero, logistica e servizi professionali. La logica di protezione \u00e8 identica:\n l’avviso viene mostrato all’utente prima che inserisca le proprie credenziali o completi l’autenticazione, neutralizzando l’attacco prima di qualsiasi compromissione.<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Quanto tempo richiede l’attivazione?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">L’onboarding \u00e8 progettato per essere rapido e non invasivo. Non richiede modifiche all’infrastruttura esistente, ai server di posta, alla configurazione DNS o al tenant Microsoft 365. Nella maggior parte dei casi l’attivazione\n guidata dal team Fortgale pu\u00f2 essere completata in poche ore. Il team ti contatter\u00e0 entro 24 ore lavorative dalla richiesta.<\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 SERVIZI CORRELATI \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-alt\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">Ecosistema Fortgale<\/span>\n <h2>La protezione anti-phishing\n <br>\u00e8 parte di una difesa pi\u00f9 ampia.<\/h2>\n <div class=\"services-grid\">\n <div class=\"service-card\">\n <div class=\"service-card-tag\">Identit\u00e0 \u00b7 ITDR<\/div>\n <h3>Protezione Identit\u00e0 Aziendale<\/h3>\n <p>Dall’Active Directory al Cloud: rilevamento anomalie, risposta agli incidenti di identit\u00e0 e governance a 360\u00b0 delle identit\u00e0 aziendali con il servizio ITDR Fortgale.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/protezione-identita\/\">Scopri il servizio ITDR \u2192<\/a>\n <\/div>\n <div class=\"service-card\">\n <div class=\"service-card-tag\">SOC \u00b7 MDR<\/div>\n <h3>Managed Detection & Response<\/h3>\n <p>Monitoraggio 24\/7 dell’intera infrastruttura. Rilevamento, investigazione e risposta agli incidenti su endpoint, rete, cloud e identit\u00e0 da analisti certificati.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/mdr-managed-detection-response\/\">Scopri l’MDR \u2192<\/a>\n <\/div>\n <div class=\"service-card\">\n <div class=\"service-card-tag\">Intelligence<\/div>\n <h3>Cyber Threat Intelligence<\/h3>\n <p>Intelligence proprietaria generata da incidenti reali: IOC applicabili, report su threat actor attivi in Italia, advisory verticali e monitoraggio dark web.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\">Scopri la CTI \u2192<\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 CTA FINALE \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"cta-section\">\n <span class=\"section-tag section-tag-light\" style=\"display:block;margin-bottom:16px;\">Inizia adesso \u2014 \u00e8 gratuito<\/span>\n <h2>Il prossimo attacco AiTM\n <br>\u00e8 gi\u00e0 in preparazione.<\/h2>\n <p>Il Fortgale M365 Phishing Interceptor blocca il phishing AiTM prima che le credenziali vengano inserite \u2014 e prima che il token di sessione venga rubato. Attivazione gratuita, nessuna modifica infrastrutturale, operativo in poche\n ore.<\/p>\n <div class=\"cta-buttons\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Attiva l’Interceptor \u2014 Gratis<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/protezione-identita\/\" class=\"btn-secondary\">Scopri l’ITDR \u2192<\/a>\n <\/div>\n <\/section>\n\n <script>\n function toggleFaq(btn) {\n btn.closest('.faq-item').classList.toggle('open');\n }\n <\/script>\n\n\n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Protezione Phishing AiTM | M365 Phishing Interceptor \u2014 Fortgale Fortgale Interceptor \u2014 Allerta Attiva \u26a0\ufe0f Attacco AiTM rilevato Questa pagina utilizza un proxy per intercettare le tue credenziali e il token MFA. Non inserire dati. Blocca e segnala hxxps:\/\/m1cr0s0ft-login[.]verify-token[.]net\/aitm\/… AiTM \u00b7 Adversary in The Middle \u00b7 M365 \u00b7 Google Workspace Il phishing moderno bypassa l’MFA. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/full-width-page.php","meta":{"footnotes":""},"class_list":["post-13778","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/comments?post=13778"}],"version-history":[{"count":2,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13778\/revisions"}],"predecessor-version":[{"id":13783,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13778\/revisions\/13783"}],"wp:attachment":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/media?parent=13778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}