2025年1月20日 · A new threat called Sneaky 2FA targets Microsoft 365 account users and is invisible to many security protections—what you need to know.

2024年3月26日 · Researchers from the Sekoia Threat Detection and Research team have published an in-depth analysis of Tycoon 2FA, a notorious adversary-in-the-middle kit, that is being distributed via cybercrime...

2024年8月22日 · Use of multifactor authentication is on the rise, but it needs to be done right to be effective as a security tool. Here‘s how to protect your organization against common MFA attacks and threat...

2024年12月25日 · According to a recent analysis from researchers based at Oasis Security, a critical vulnerability in Microsoft's 2FA implementation could have enabled attackers to bypass …

2024年5月9日 · Tycoon 2FA relies on attacker-controlled infrastructure to host the phishing webpage. Through the use of a “reverse proxy,” the platform allows the interception of victims’ entered credentials. The credentials are then relayed to the legitimate service for a transparent, successful login, prompting MFA requests.

2024年9月23日 · Tycoon 2FA operates as a “man-in-the-middle” attack, primarily targeting Microsoft 365 and Gmail accounts. Its main goal is to harvest session cookies, which attackers then use to bypass multifactor authentication (MFA) during subsequent logins.

2025年3月19日 · The first few months of 2025 saw a massive spike in phishing-as-a-service (PhaaS) attacks targeting organizations around the world, with more than a million attacks detected by Barracuda systems in January and February. The attacks were powered by several leading PhaaS platforms, including Tycoon 2FA, EvilProxy, and Sneaky 2FA.

2024年11月19日 · Microsoft reports that 2FA can block 99.9% of automated attacks. By adding an extra hurdle for cybercriminals, 2FA protects against common threats such as phishing, keylogging, and credential stuffing.

2025年3月22日 · In the digital age, we often rely on security measures like two-factor authentication (2FA) to keep our online accounts safe. But even these systems can be exploited by cunning attackers using a technique called a man-in-the-middle (MITM) phishing attack.

2022年11月4日 · 2FA bypass attacks are cyberattacks intended for account takeover when hackers have already accessed the credentials of a particular account, and they bypass the second layer of authentication in several ways.