'Tycoon' Malware Kit Bypasses Microsoft, Google MFA

Tycoon 2FA is an active adversary-in-the-middle phishing-as-a-service sold via Telegram that targets Microsoft 365 and Gmail to bypass multi-factor authentication by harvesting session cookies; the report details the kit’s six-stage attack flow, widespread distribution (1,100+ domains), pricing and operator information, enhanced obfuscation/anti-detection features, and published IoCs.