UNMASKING TYCOON 2FA: A STEALTHY PHISHING KIT USED TO BYPASS MICROSOFT 365 AND GOOGLE MFA

Summary from the TLDR InfoSec newsletter

Tycoon 2FA is a phishing-as-a-service platform that was recently updated to enhance detection avoidance. The toolkit relies on victims entering their information into attacker-controlled infrastructure. After MFA prompting, session cookies are relayed to the attacker. This article provides some real-world examples and defenses.