darktrace

Darktrace is a cybersecurity company whose Security Operations Center (SOC) analyzes sophisticated phishing campaigns targeting SaaS environments. Recent analysis from late 2024 and early 2025 uncovered coordinated attacks that abuse legitimate cloud services like Milanote and use advanced Adversary-in-the-Middle (AitM) phishing kits such as Tycoon 2FA to bypass multi-factor authentication (MFA). These evolving tactics highlight the need for robust defenses against cybercriminal operations that subvert traditional security controls. The tag covers threat intelligence and incident response insights from Darktrace's research into modern phishing and account compromise techniques.