Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing
Over Security - Cybersecurity news aggregator [Unofficial]
May 17, 2026
The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts.
Discussion in the ATmosphere