Infosecurity-Magazine
Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation
First seen 4 Mar 2026, 17:12 UTC
•



+48
•86% similarity
•35.4
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale account theft. Over 330 domains linked to the operation were seized, disrupting a service that had been active since August 2023 and accounted for a substantial portion of phishing attempts worldwide.
ThreatCluster AI
Timeline
2023-08-01
Tycoon2FA phishing service becomes operational
2026-03-02
Law enforcement agencies finalize takedown plans
2026-03-04
Tycoon2FA infrastructure seized by authorities
2026-03-05
Public announcement of Tycoon2FA takedown