Cybercriminals are utilizing a new phishing-as-a-service (PhaaS) platform called ‘Tycoon 2FA’ to target Microsoft 365 and Gmail accounts and bypass two-factor authentication (2FA) protection. Sekoia analysts discovered Tycoon 2FA in October 2023 during routine threat hunting, with activity observed since at least August 2023.

SUMMARY

An overview and some facts about the russian group formerly known as NOBELLIUM.

This article will cover an overview and common TTPs of the APT group Octo Tempest.

A brief introduction to the world of CTI