Tycoon 2FA is a phishing-as-a-service (PhaaS) platform that was first seen in August 2023.
Like many phish kits, it bypasses multifactor authentication (MFA) protections and poses a significant threat to users. Lately, Tycoon 2FA has been grabbing headlines because of its role in ongoing campaigns designed to target Microsoft 365 and Gmail accounts.
Read more…
Source: Proofpoint
Related:
- Chinese hacker group caught bypassing 2FA
December 23, 2019
Security researchers say they found evidence that a Chinese government-linked hacking group has been bypassing two-factor authentication (2FA) in a recent wave of attacks. The attacks have been attributed to a group the cyber-security industry is tracking as APT20, believed to operate on the behest of the Beijing government, Dutch cyber-security firm Fox-IT said in a ...
- LabKey Vulnerabilities Threaten Medical Research Data
January 25, 2019
LabKey Server version 18.3.0-61806.763, released on January 16, patches all three issues, so users should update as soon as possible. A trio of vulnerabilities in a popular open source medical data collaboration tool leaves important healthcare research data and potentially subject information open to multiple cross site scripting (XSS) attacks. The flaws are serious as they ...
- China Tightens Grip On Blockchain-Based Services
January 11, 2019
Users of blockchain-based information services will have to register their real names and identity numbers in latest crackdown – even as Hong Kong moves to attract virtual asset traders China has tightened regulatory pressure on blockchain-based information services, in an effort to ensure that authorities can trace any information posted online in the country back to the person ...
- Pentagon discloses card breach
October 13, 2018
Pentagon official said on Friday that the Department of Defense had suffered a security breach thanks to a third-party contractor. An investigation is still underway, so the exact details haven’t been made public, but according to an Associated Press report, a DOD official said that roughly 30,000 DOD military and civilian personnel are believed to be affected. ...
- Why is Google selling potentially compromised Chinese security keys?
August 31, 2018
Google has come under fire for its ties to China recently. The situation has the potential to get a lot worse now that Google is offering a Chinese security product to those who need protection the most. Earlier this month, the tech giant was criticised after reports emerged of its secret project to develop a Google ...
- Mastercard: Biometrics use set to skyrocket
July 6, 2018
Biometric technology is set to become an integral part of all online shopping as the need for greater security increases, a new report has claimed. Research from Mastercard claims that one in four online transactions will need a greater level of authentication and security within the next 12 months. New EU regulations governing online fraud are set to come ...

