Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation

Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation

First seen 4 Mar 2026, 17:12 UTC ComputerweeklyInfosecurity-MagazineBlogs.MicrosoftCoinbaseTrendmicro+48 86% similarity 35.4

Article Content

Browse articles
ThreatCluster

A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale account theft. Over 330 domains linked to the operation were seized, disrupting a service that had been active since August 2023 and accounted for a substantial portion of phishing attempts worldwide.

ThreatCluster AI

Timeline

2023-08-01
Tycoon2FA phishing service becomes operational
2026-03-02
Law enforcement agencies finalize takedown plans
2026-03-04
Tycoon2FA infrastructure seized by authorities
2026-03-05
Public announcement of Tycoon2FA takedown

Community

Browse all →