Frequency
4
occurrences
First Seen
March 4, 2026
Last Seen
August 20, 2026
Related Threat Clusters
-
Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale…
59 articles · Updated March 5, 2026 -
Targeted AWS Phishing Campaign Captures Credentials and MFA Codes
A sophisticated phishing campaign targeting Amazon Web Services (AWS) users has emerged, utilizing cloned login pages to capture credentials and multifactor authentication (MFA) codes in real-time. The attackers have…
4 articles · Updated June 25, 2026 -
Identity-Based Attacks Target Authentication Systems and Credentials
Recent identity-based attacks have exploited vulnerabilities in authentication systems, targeting credentials and identity infrastructure. Notable incidents include the compromise of over 18,000 routers by APT28 to…
59 articles · Updated May 29, 2026
Recent Intelligence Reports
- Hackers Create Hidden Microsoft 365 Inbox Rules to Conceal Vendor Payment Fraud — Gbhackers · August 20, 2026
- AiTM Phishing Kits Steal Console Credentials and MFA Codes from AWS Environments — Cybersecuritynews · June 25, 2026
- AWS AiTM Phishing Kit Steals Console Credentials and MFA Codes in Real Time — Cybersecuritynews · June 25, 2026
- Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale — Blogs.Microsoft · March 4, 2026