Tycoon 2FA Returns With OAuth

Source: Petri

Published:

<p>Attackers are using Microsoft’s own authentication flow to silently hijack Microsoft 365 accounts.</p> <p>Cybercriminals are once again refining their tactics, as the Tycoon 2FA phishing kit evolves to target Microsoft 365 accounts. Instead of stealing passwords, attackers now manipulate users in

Read original article