Even multi-factor authentication (MFA) isn’t foolproof anymore. A new phishing platform called Tycoon 2FA is being used by cybercriminals to steal login credentials in real time. Users are tricked into entering their email, password, and authentication code on a fake login page—giving attackers full access to business accounts like Microsoft 365 or Gmail.
A sophisticated phishing platform known as Tycoon 2FA has recently been used by cybercriminals to bypass multi-factor authentication (MFA) and gain access to business accounts such as Microsoft 365.
The attack works by sending users to a fake login page that looks identical to the real one. When the user enters their email, password and authentication code, the attacker captures the information in real time and logs into the account themselves.
This means even organisations using MFA could still be at risk if staff unknowingly enter credentials into a phishing site.
What can businesses do?
As cyber threats continue to evolve, businesses should treat cybersecurity as an ongoing process rather than a one-time setup.
Take action today!
Whether you’re an existing customer or considering our services, get in touch now to secure your business before hackers do.
AnyIT is a managed IT service provider based in Needham Market, Suffolk, trading since 2005. Call 01449 798088, email info@anyit.com or use our contact page.
Managed IT support is £85 per seat per month with a £400 monthly minimum. We support 200+ Suffolk businesses since 2005, deliver 99.9% uptime and commit to a 30-minute first response for major incidents with 24/7 monitoring.