Following the disruption of the Tycoon 2FA phishing-as-a-service (PhaaS) platform, threat actors are increasingly integrating its sophisticated bypass tools into other phishing kits. This 'code recycling' ensures that the platform's advanced MFA-bypass capabilities remain active in the wild, despite the primary infrastructure being offline. [Sources: SecurityWeek]