Tycoon 2FA Phishing Platform Dismantled in Global Takedown

Back Feeds.Feedburner

Tycoon 2FA Phishing Platform Dismantled in Global Takedown

Feeds.Feedburner •Eduard Kovacs • March 4, 2026

Share: View original

The phishing-as-a-service platform was used to send fraudulent emails to over 500,000 organizations every month.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale account theft. Over 330 domains linked to the operation were seized, disrupting a service that had been active since August 2023 and accounted for a substantial portion of phishing attempts worldwide. 59 sources 72

Extracted Entities

Attack Types (1)

Campaigns (1)

Global Takedown

MITRE ATT&CK (1)

T1566 - Phishing

Platforms (1)

Tycoon 2FA Phishing Platform