
  <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
      <title>TheGriffyn</title>
      <link>https://thegriffyn.vercel.app/blog</link>
      <description>All my thoughts/ideas in one place</description>
      <language>en-us</language>
      <managingEditor>hamzaharooon@protonmail.com (Hamza Haroon)</managingEditor>
      <webMaster>hamzaharooon@protonmail.com (Hamza Haroon)</webMaster>
      <lastBuildDate>Sat, 06 Jun 2026 00:00:00 GMT</lastBuildDate>
      <atom:link href="https://thegriffyn.vercel.app/tags/threat-intel/feed.xml" rel="self" type="application/rss+xml"/>
      
  <item>
    <guid>https://thegriffyn.vercel.app/blog/writeups/threat-intel/phishing/tycoon2fa-writeup</guid>
    <title>Dissecting Tycoon 2FA: IP Reputation Gating, Path Tokens, and AiTM Session Theft</title>
    <link>https://thegriffyn.vercel.app/blog/writeups/threat-intel/phishing/tycoon2fa-writeup</link>
    undefined
    <pubDate>Sat, 06 Jun 2026 00:00:00 GMT</pubDate>
    <author>hamzaharooon@protonmail.com (Hamza Haroon)</author>
    <category>tycoon-2fa</category><category>aitm-phishing</category><category>cloaking</category><category>javascript-deobfuscation</category><category>threat-intel</category><category>storm-1747</category><category>phishing</category><category>malware-analysis</category>
  </item>

    </channel>
  </rss>
