TYCOON2FA TARGETS MICROSOFT 365 WITH DEVICE-CODE PHISHING

The Tycoon2FA phishing kit now supports device-code phishing attacks, exploiting Trustifi click-tracking URLs to compromise Microsoft 365 accounts. The technique bypasses traditional multi-factor authentication protections.