Sneaky2FA Phishing Kit Enhances Tactics with Browser-in-the-Browser Functionality

Sneaky2FA Phishing Kit Enhances Tactics with Browser-in-the-Browser Functionality

First seen 2 Dec 2025, 18:33 UTC •ScworldTechnaduBleepingcomputerCsoonline •85% similarity •30.2

Article Content

Browse articles
ThreatCluster

The Sneaky2FA phishing-as-a-service kit has been upgraded to include Browser-in-the-Browser (BITB) techniques, allowing attackers to create deceptive phishing pages that mimic legitimate login interfaces. This evolution targets Microsoft 365 accounts by embedding fake login forms within a browser window on the victim's desktop, effectively stealing credentials and session cookies. The kit's recent capabilities indicate a significant advancement in phishing tactics.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Sneaky2FA VoidProxy W3LL Panel OV6 Tycoon2FA Microsoft Google Edge Google Workspace MacOS Messenger Microsoft 365 Microsoft Online Man-in-the-Middle Phishing Cloudflare Turnstile BitB Mamba2FA PhaaS