A powerful phishing kit known as Tycoon 2FA has been making waves across the cybersecurity world since it first appeared in August 2023. The kit operates as a Phishing-as-a-Service (PhaaS) platform, meaning cybercriminals can rent and deploy it without building anything from scratch. Its primary goal is to steal authenticated session tokens from Microsoft 365 […]
The post Tycoon 2FA AiTM Kit Bypasses MFA on Entra ID and Google Workspace Accounts appeared first on Cyber Security News.