ANY.RUN Identifies New Salty2FA and Tycoon2FA Phishing Hybrid

ANY.RUN Identifies New Salty2FA and Tycoon2FA Phishing Hybrid

First seen 3 Dec 2025, 04:39 UTC •EinpresswireMypanhandleCbs42Csoonline •88% similarity •20.3

Article Content

Browse articles
ThreatCluster

ANY.RUN has discovered a new hybrid phishing framework that combines the Salty2FA and Tycoon2FA Phishing-as-a-Service kits. This development impacts enterprises by targeting their two-factor authentication processes. The discovery indicates a significant evolution in phishing tactics focused on 2FA systems.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Storm-1747 Salty2FA Tycoon2FA Asp.net CDN Phishing Cloudflare Turnstile