Related Threat Clusters
-
Global Operation Dismantles LeakBase Cybercrime Forum
On March 3 and 4, 2026, a coordinated international law enforcement operation led by the FBI and Europol resulted in the seizure of LeakBase, one of the largest online forums for cybercriminals, which had over 142,000…
39 articles · Updated March 4, 2026 -
Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale…
59 articles · Updated March 5, 2026 -
Operation Synergia III Dismantles 45,000 Malicious IPs, Arrests 94 Worldwide
An international cybercrime operation, Operation Synergia III, coordinated by INTERPOL, has dismantled over 45,000 malicious IP addresses and servers linked to phishing, malware, and ransomware attacks. The operation,…
29 articles · Updated March 13, 2026 -
Sneaky2FA Phishing Kit Enhances Techniques with Browser-in-the-Browser Functionality
The Sneaky2FA phishing-as-a-service kit has integrated Browser-in-the-Browser (BITB) techniques to enhance its ability to steal Microsoft 365 credentials. This updated functionality allows attackers to create deceptive…
4 articles · Updated November 21, 2025 -
Quantum Route Redirect PhaaS Targets Microsoft 365 Users Globally
A phishing automation platform named Quantum Route Redirect has been identified, utilizing around 1,000 domains to steal Microsoft 365 user credentials. Discovered by KnowBe4 in August, this platform allows less skilled…
5 articles · Updated November 11, 2025 -
389% Increase in Account Breaches Driven by Phishing Services in 2025
eSentire reported a significant rise in account compromises in 2025, with email-led intrusions linked to credential theft. The research, based on data from over 2,000 customers, indicated that account compromise…
4 articles · Updated January 16, 2026 -
ANY.RUN Reports Key Cybersecurity Milestones and Discoveries of 2025
ANY.RUN has published its 2025 Year in Review report, detailing significant growth and breakthroughs in malware analysis and threat intelligence. The report reflects contributions from a global community of 15,000 SOC…
2 articles · Updated December 19, 2025 -
Sneaky2FA Phishing Kit Enhances Tactics with Browser-in-the-Browser Functionality
The Sneaky2FA phishing-as-a-service kit has been upgraded to include Browser-in-the-Browser (BITB) techniques, allowing attackers to create deceptive phishing pages that mimic legitimate login interfaces. This evolution…
4 articles · Updated November 21, 2025 -
Email Spoofing Exploit via Misconfigured Routing
Attackers are exploiting misconfigured email routing to spoof internal emails, utilizing PhaaS platforms like Tycoon2FA to steal credentials. This tactic allows phishing actors to bypass spoof protections and send…
4 articles · Updated January 7, 2026 -
Quantum Route Redirect PhaaS Targets Microsoft 365 Users Globally
The Quantum Route Redirect phishing-as-a-service platform is exploiting nearly 1,000 domains to steal Microsoft 365 user credentials. Discovered by KnowBe4 in August 2025, this platform automates phishing attacks,…
8 articles · Updated November 26, 2025
Recent Intelligence Reports
- Law enforcement bin 45,000 malicious IPs — Computing · March 13, 2026
- Europol Operation Seizes LeakBase Data Breach Site — Infosecurity-Magazine · March 5, 2026
- Global scam network shut down; Latvian companies affected — Eng.Lsm.Lv · March 5, 2026
- Account Compromise Surged 389% in 2025, Says eSentire — Infosecurity-Magazine · January 16, 2026
- Phishing services drive 389% surge in account breaches — Securitybrief · January 16, 2026
- Phishing services drive 389% surge in account breaches — Securitybrief.Co.Nz · January 16, 2026
- Phishing services drive 389% surge in account breaches — Securitybrief.Au · January 16, 2026
- Misconfigured email routing enables internal-spoofed phishing — Securityaffairs · January 7, 2026