Law enforcement and security firms take down huge PhaaS platform

Back Itpro

Law enforcement and security firms take down huge PhaaS platform

Itpro •Emma Woollacott • March 5, 2026

Share: View original

Tycoon 2FA has been responsible for tens of millions of phishing messages, reaching over 500,000 organizations each month worldwide

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale account theft. Over 330 domains linked to the operation were seized, disrupting a service that had been active since August 2023 and accounted for a substantial portion of phishing attempts worldwide. 59 sources 72

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1566 - Phishing

Tools (1)