Cybercriminals increasingly exploit supply chains and shared infrastructure as attack vectors, with commercialized tools such as Tycoon 2FA (89 percent market share) enabling even less sophisticated actors.