A new phishing kit is targeting Gmail and Microsoft email accounts — and it can even bypass 2FA

A padlock resting on a keyboard.

A brand new phishing kit is gaining popularity in the underground community, researchers have claimed.

Tycoon 2FA does a good job at evading security analysts, while allowing threat actors to bypass even two-factor authentication (2FA), according to cybersecurity experts at Sekoia, who recently detailed the newest iteration of the Phishing-as-a-Service (PhaaS) solution.