<ul><li>The operators of the Phishing-as-a-Service platform Tycoon2FA have updated their kit to enhance evasion capabilities.</li><li>The updates include advanced evasion tactics such as a custom CAPTCHA via HTML5 canvas, invisible Unicode in obfuscated JavaScript, and anti-debugging scripts.</li><li>Tycoon2FA now uses invisible Unicode characters and JavaScript Proxy objects to complicate analysis and delay script execution.</li><li>The phishing kit also implemented a custom HTML5 canvas-based solution to evade detection and hinder automated analysis.</li></ul>

Tycoon2FA phishing kit rolled out significant updates

Discover more