Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace
CYBERSECURITY FEATURED ANALYSIS

Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace

SOURCE

Elastic Security Labs

DATE

READ

1 min read

Tycoon 2FA bypasses MFA on Entra ID and Google Workspace. We map telemetry fingerprints across both platforms, ship detection rules for both tiers, and contain incidents in under 10 seconds with Elastic Workflows.

Tycoon 2FA bypasses MFA on Entra ID and Google Workspace. We map telemetry fingerprints across both platforms, ship detection rules for both tiers, and contain incidents in under 10 seconds with Elastic Workflows.