Tycoon2FA Linked Phishing Attack Targeting Microsoft 365 Users to Steal Logins

A sophisticated phishing campaign linked to Tycoon2FA is actively targeting Microsoft 365 users by employing an unusual URL manipulation technique. The attack leverages malformed URL prefixes with backslash characters (https:\$$ instead of the standard forward slashes (https://) to bypass security filters while still being processed correctly by most web browsers. This technique creates a dangerous […]

The post Tycoon2FA Linked Phishing Attack Targeting Microsoft 365 Users to Steal Logins appeared first on Cyber Security News.