Tycoon is a tool tracked across 4 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed December 15, 2025; most recent activity July 22, 2026.
On July 20, 2026, German and U.S. authorities dismantled the Kratos phishing-as-a-service (PhaaS) platform, arresting its developer in Indonesia. The operation neutralized over 200 servers and disrupted approximately…
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale…
Surface Security launched a browser-native security platform designed to combat sophisticated phishing attacks, particularly those leveraging AI. The new platform, powered by Surface Vision technology, detects targeted…
As we approach 2026, the cybersecurity landscape is shifting dramatically. Key trends include the evolving role of the CISO as a financial risk broker, the rise of AI in both creating exploits and automating tasks, and…