#device-code-flow

Tycoon2FA Phishing Kit Targets Microsoft 365 via Device Code Flow

Tycoon2FA phishing kit now leverages Microsoft 365 device code flows and Trustifi URL abuse to bypass MFA and hijack enterprise accounts.