Tycoon 2FA Operators Use OAuth Device Code Phishing to Bypass MFA

A new phishing campaign uncovered in late April 2026 shows how threat actors behind the Tycoon 2FA Phishing-as-a-Service (PhaaS) kit are evolving beyond traditional…
Delivered by PolitePaul service