Anatomy of Tycoon 2FA Phishing: Tactics Targeting M365 and Gmail

Gbhackers •Mayura Kathir • November 4, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Tycoon 2FA Phishing Kit Targets M365 and Gmail Users The Tycoon 2FA phishing kit, a Phishing-as-a-Service platform, was designed to bypass two-factor authentication protections for Microsoft 365 and Gmail accounts. It utilizes an Adversary-in-the-Middle approach with a reverse proxy server to create deceptive phishing pages that capture user credentials and session cookies in real-time. This sophisticated tool emerged in August 2023 and continues to pose risks to users of these services. 2 sources 29

Extracted Entities

Anatomy of Tycoon 2FA Phishing: Tactics Targeting M365 and Gmail

The full story

Extracted Entities

Attack Types (1)

Platforms (1)

Tools (1)