Background
Recently, security experts have discovered a wave of targeted phishing campaigns aimed at Microsoft 365 users. These campaigns are conducted by Tycoon2FA, a notorious threat actor specializing in phishing-as-a-service (PhaaS). The main goa...