The era of trusting users to spot fake login pages is over. A new generation of phishing kits, like Tycoon 2FA, has automated credential theft into a simple subscription service. These kits create flawless replicas of Microsoft or Google login portals. They operate as a "man-in-the-middle," seamlessly relaying one-time codes and session cookies in real time. Over 64,000 attacks have been...