AiTM

Tycoon 2FA: How Storm-1747 Built an MFA-Bypassing Phishing Empire

Tycoon 2FA: How Storm-1747 Built an MFA-Bypassing Phishing Empire

| | AiTM, Detection, detections, Intel, IR, Phishing, secops, security, Threat
We used to believe MFA was the ultimate line of defense. Then phishing kits like Tycoon 2FA showed up and proved otherwise. Unlike the crude clones of years past, Tycoon 2FA leverages ...
Annoyed Engineer
AiTM Workflow

The Real Threat in the Middle: How Mid-Stage Adversaries Are Outsmarting MFA and Scaling Fast

| | AiTM, Cloud, detections, Intel, Microsoft, Phishing, security, Uncategorized
For years, multi-factor authentication (MFA) has been the security world’s favorite answer to “what should we do about phishing?” But attackers don’t wait for the controls to get better—they evolve around them ...
Annoyed Engineer
attacks, AiTM, APT AiTM quantum attacks Raspberry Robin APT29 ransomware NATO Barracuda Networks ATO Attacks

Adversary-in-the-Middle Attacks Persist – Strategies to Lessen the Impact 

| | adversary-in-the-middle, AiTM, biometric authentication, combat MFA, Fraud
Adversary-in-the-middle fraud (AiTM) represents a significant, ongoing challenge for businesses, with tactics like email hijacking, AI attacks and account takeovers becoming increasingly complex ...
Security Boulevard
detection, campaigns, threat, HEAT, managed detection and response, Apache ActiveMQ, vulnerability, Aqua Cham, threat, elGang APT Meltdown Spectre Threat Detection

Three Nation-State Campaigns Targeting Healthcare, Banking Discovered

| | AiTM, bec, MFA, Phishing, Ransomware, threat actor
Researchers have identified three distinct nation-state campaigns leveraging advanced highly evasive and adaptive threat (HEAT) tactics ...
Security Boulevard
attacks, AiTM, APT AiTM quantum attacks Raspberry Robin APT29 ransomware NATO Barracuda Networks ATO Attacks

Threat Actors Turn to AiTM to Bypass MFA

| | 2FA phishing, AiTM, bec, business email compromise, MFA
Threat actors have started moving away from authenticating via legacy protocols to bypass multifactor authentication (MFA) in Microsoft 365, according to an Expel report on cybersecurity trends. Instead, malicious actors are adopting ...
Security Boulevard