← Back to feed
research Elastic Security Labs

Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace

Elastic Security Labs Google

Tycoon 2FA bypasses MFA on Entra ID and Google Workspace. We map telemetry fingerprints across both platforms, ship detection rules for both tiers, and conta...

T1557
Read the full story Elastic Security Labs →

Related Coverage

research Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace Elastic Security Labs · May 26