Security researchers from Sophos X-Ops have investigated how Evilginx works and the potential threats it poses.