Infosecurity-Magazine Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation
Article Content
Browse articles 
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale account theft. Over 330 domains linked to the operation were seized, disrupting a service that had been active since August 2023 and accounted for a substantial portion of phishing attempts worldwide.
Ask AI about this cluster
Answers cite the sources they use
Updated 205d ago How this analysis works
Timeline
2023-08-01
Tycoon2FA phishing service becomes operational
2026-03-02
Law enforcement agencies finalize takedown plans
2026-03-04
Tycoon2FA infrastructure seized by authorities
2026-03-05
Public announcement of Tycoon2FA takedown
More articles in this cluster (59)
Following this threat?
Track Lumma Stealer and Europol in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
SectopRAT Variant Exploits Legitimate Software for Remote Control Attacks A new variant of the SectopRAT remote access Trojan (RAT) has been discovered embedded in legitimate software from an Italian digital audio company. This multi-stage attack allows attackers to gain full remote control of Windows systems by concealing the malware within modified application components. The malware is… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…