ATTACKERS ARE USING “SNEAKY 2FA” TO CREATE FAKE SIGN-IN WINDOWS THAT LOOK REAL

Summary from the TLDR InfoSec newsletter

A Phishing-as-a-Service kit called “Sneaky 2FA” enables Browser-in-the-Browser attacks that create fake login pop-ups with convincing address bars using HTML/CSS.