TYKIT SVG PHISHING KIT TIED TO ATTACKS TARGETING M365 CREDENTIALS

Summary from the TLDR InfoSec newsletter

Researchers from ANY.RUN identified a new phishing campaign using SVG attachments as lures, dubbed the Typical phishing kit or Tykit. The malicious SVG distracts users while embedded JavaScript redirects the victim to a “trampoline” page,  which then leads to a phishing site mimicking the Microsoft 365 login page. ANY.RUN believes this campaign is operated by a Phishing-as-a-Service (PhaaS) operator.