Tycoon2FA: Adding Device Code Phishing to Its Arsenal
Tycoon2FA is a well-known AiTM phishing kit that added device code phishing support in May 2026. It was previously tracked as the…
Tag: Phishing Kit
InsureOTP Kit: A Purpose-Built Phishing Framework for Insurance Account Hijacking
InsureOTP Kit is a previously undocumented phishing kit identified by CTM360, designed specifically for insurance-themed phishing operations. It provides live session management,…
Fake Microsoft Entra Passkey Enrollment Used in Voice Phishing Attacks Targeting M365 Users
A sophisticated threat actor tracked as O-UNC-066 by Okta is targeting organizations across multiple sectors with a voice-based phishing (vishing) scheme that…
Montana Empire Phishing Kit Exploits AI-Hallucinated Domains
Montana Empire is a phishing kit used in phantom squatting attacks. It clones real storefronts in real time to steal credit card…