Cybercriminals have been increasingly using a new phishing-as-a-service (PhaaS) platform named 'Tycoon 2FA' to target #Microsoft365 and #Gmail accounts and bypass two-factor authentication ( #2FA ) protection.