A sophisticated phishing campaign, led by the Tycoon2FA and Storm-1575 groups, threatens Office 365 users globally. This collaboration utilizes advanced techniques like adversary-in-the-middle (AiTM) to bypass multi-factor authentication. Targeting victims with social engineering tactics, it employs a complex phishing infrastructure to steal credentials and session data, maintaining persistent access and evading detection.

International authorities dismantle AVCheck in cybercrime operation
International law enforcement has taken down AVCheck, a major platform that enabled cybercriminals to test if their malware could evade antivirus software detection. Investigators have