[et_pb_section fb_built=”1″ _builder_version=”4.24.2″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_row column_structure=”3_4,1_4″ disabled_on=”on|off|off” _builder_version=”4.24.2″ _module_preset=”default” background_image=”\/wp-content\/uploads\/2024\/03\/MFAvsHacker.png” background_position=”center_right” background_horizontal_offset=”46%” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”3_4″ _builder_version=”4.24.2″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.24.2″ _module_preset=”default” background_color=”rgba(255,255,255,0.86)” custom_margin=”20px|20px|20px|20px|false|false” custom_padding=”20px|20px|20px|20px|false|false” border_radii=”on|20px|20px|20px|20px” border_width_all=”3px” global_colors_info=”{}” theme_builder_area=”post_content”]<\/p>\n
At Kinetics, we’ve always emphasized the importance of multi-factor authentication (MFA) as a critical layer in cybersecurity. Without MFA, it’s only a matter of time before you fall victim to a cyber attack.<\/p>\n
However, as we’ve also mentioned, no single defense is enough. Cybersecurity needs to be layered, and that includes MFA.<\/p>\n
Recently, cybercriminals have been using a platform called “Tycoon 2FA phishing-as-a-service” to target Microsoft 365 and Gmail accounts, bypassing two-factor authentication. This platform is similar to early hacks like “Dadsec,” indicating code-sharing among the hacker community.<\/p>\n
The latest version of Tycoon 2FA, released in 2024, shows a continuous effort to improve its stealth capabilities. It leverages 1,100 domains and has been identified in numerous phishing attacks. These attacks typically follow a multi-step process:<\/p>\n
At Kinetics, our KARE Foundation<\/a> defends you with DNS scrubbing, a browser extension, and geo-blocking, among other tools, to protect your organization from these types of attacks. Stay vigilant and stay protected with Kinetics.<\/strong><\/p>\n https:\/\/www.bleepingcomputer.com\/ne…ing-kit-targets-microsoft-365-gmail-accounts\/<\/a><\/p>\n https:\/\/blog.sekoia.io\/tycoon-2fa-a…-the-latest-version-of-the-aitm-phishing-kit\/<\/a><\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.24.2″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”3_4,1_4″ disabled_on=”off|on|on” _builder_version=”4.24.2″ _module_preset=”default” background_enable_image=”off” background_position=”center_right” background_horizontal_offset=”46%” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”3_4″ _builder_version=”4.24.2″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.24.2″ _module_preset=”default” background_color=”rgba(255,255,255,0.86)” custom_margin=”5px|5px|5px|5px|false|false” custom_padding=”5px|5px|5px|5px|false|false” border_radii=”on|20px|20px|20px|20px” border_width_all=”0px” global_colors_info=”{}” theme_builder_area=”post_content”]<\/p>\n At Kinetics, we’ve always emphasized the importance of multi-factor authentication (MFA) as a critical layer in cybersecurity. Without MFA, it’s only a matter of time before you fall victim to a cyber attack.<\/p>\n However, as we’ve also mentioned, no single defense is enough. Cybersecurity needs to be layered, and that includes MFA.<\/p>\n Recently, cybercriminals have been using a platform called “Tycoon 2FA phishing-as-a-service” to target Microsoft 365 and Gmail accounts, bypassing two-factor authentication. This platform is similar to early hacks like “Dadsec,” indicating code-sharing among the hacker community.<\/p>\n The latest version of Tycoon 2FA, released in 2024, shows a continuous effort to improve its stealth capabilities. It leverages 1,100 domains and has been identified in numerous phishing attacks. These attacks typically follow a multi-step process:<\/p>\n At Kinetics, our KARE Foundation<\/a> defends you with DNS scrubbing, a browser extension, and geo-blocking, among other tools, to protect your organization from these types of attacks. Stay vigilant and stay protected with Kinetics.<\/strong><\/p>\n https:\/\/www.bleepingcomputer.com\/ne…ing-kit-targets-microsoft-365-gmail-accounts\/<\/a><\/p>\nRead more:<\/h3>\n
Without MFA, you WILL get hacked – it is only a matter of time.<\/h2>\n
BuT MFA by itself is not enough.<\/h3>\n
\n
Read more:<\/h3>\n