New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts

Caute_cautim — Mon, 25 Mar 2024 21:49:42 GMT

Hi All

Cyber-criminals have been increasingly using a new phishing-as-a-service (PhaaS) platform named 'Tycoon 2FA' to target Microsoft 365 and Gmail accounts and bypass two-factor authentication (2FA) protection.

Tycoon 2FA was discovered by Sekoia analysts in October 2023 during routine threat hunting, but it has been active since at least August 2023, when the Saad Tycoon group offered it through private Telegram channels.

https://www.bleepingcomputer.com/news/security/new-mfa-bypassing-phishing-kit-targets-microsoft-365-gmail-accounts/

Regards

Cautim_Cautim

topic New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts in Threats

New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts