Tycoon 2FA and the Collapse of Legacy MFA
ID: 544f9b4b-3779-5ca8-827e-710a541ad6e2
STIX ID: report--544f9b4b-3779-5ca8-827e-710a541ad6e2
Feed Name: Bleeping Computer
Threat Score
The report warns that Tycoon 2FA is a turnkey phishing-as-a-service kit performing real-time MFA relay attacks and session takeovers against Microsoft 365 and Gmail at scale (claimed 64,000+ attacks), evading detection with obfuscation and anti-bot measures; it concludes legacy MFA is insufficient and recommends deploying phishing-resistant FIDO2 biometric hardware.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.