Tycoon2FA hijacks Microsoft 365 accounts via devicecode phishing

The Tycoon2FA phishing kit now supports devicecode phishing attacks and abuses Trustifi clicktracking URLs to hijack Microsoft 365 accounts