Detecting & Blocking Tycoon’s latest AiTM Phishing Kit

This blog details how Obsidian detects and blocks the latest version of Tycoon, an adversary-in-the-middle (AiTM), Phishing-as-a-Service (PhaaS) platform that leverages a reverse proxy to intercept and replay credentials and MFA prompts. This new version of Tycoon has recently received press from Forbes [1], Dark Reading [2], TechRadar [3], and others. Background Sekoia wrote a […]

The post Detecting & Blocking Tycoon’s latest AiTM Phishing Kit appeared first on Obsidian Security.

The post Detecting & Blocking Tycoon’s latest AiTM …

adversary adversary-in-the-middle aitm aitm phishing aitm phishing kit as-a-service blocking blog credentials dark developer field notes featured forbes intercept kit latest mfa obsidian phaas phishing phishing-as-a-service phishing kit platform press product spotlights prompts proxy replay reverse reverse proxy saas security security guidance service tycoon version