Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing

BleepingComputer·17. Mai 2026, 14:43

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. [...]

MITRE ATT&CK Kill Chain (1 Techniken)

Initial Access

Phishing

Themen

Security

KnowledgeDeliver flaw exploited as a zero-day to install web shells

Charter confirms data breach after ShinyHunters extortion threat

The Hackers Behind Shai-Hulud: Lucky or Skilled?

IBM QRadar SIEM: Schwachstellen in Komponenten von Drittanbietern geschlossen

How Varonis Atlas integrates Claude Compliance API for AI governance