Cybersecurity researchers have disclosed a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies, which is used as a proxy to redirect Microsoft 365…
DOUBLOON DREDGER is a financially motivated threat actor that abuses Notion accounts to invite targets to view PDFs containing malicious links. The…
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has expanded its capabilities to include device code phishing, a technique that abuses the…
A sophisticated device code phishing campaign targeting Microsoft 365 accounts has been observed between late June and early July 2026, leveraging collaboration-themed…
Tycoon 2FA was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Trustifi is an email security platform whose click-tracking URLs were used in Tycoon 2FA device code phishing campaigns to initiate attack chains.