Coinbase + Microsoft disrupt “Tycoon 2FA,” a phishing-as-a

Back Coinbase

Coinbase + Microsoft disrupt “Tycoon 2FA,” a phishing-as-a

Coinbase • March 4, 2026

Share: View original

... phishing -as-a-. Phishing has evolved. It's no longer just fake emails that steal passwords, it's an industrialized ecosystem where criminals ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale account theft. Over 330 domains linked to the operation were seized, disrupting a service that had been active since August 2023 and accounted for a substantial portion of phishing attempts worldwide. 59 sources 72

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1566 - Phishing

Tools (1)