Tycoon2FA Hijacks Microsoft Accounts via Device-Code Phishing
Cybercriminals are exploiting a legitimate Microsoft feature to gain unfettered access to cloud accounts. The resurfaced Tycoon2FA phishing kit highlights a sophisticated new attack vector.