Malware e strumenti · Furto di credenziali

Coalizione globale smantella Tycoon 2FA, interrotta piattaforma phishing

Europol e Microsoft hanno smantellato l'infrastruttura core di Tycoon 2FA. Il servizio in abbonamento eseguiva AiTM per catturare credenziali, OTP e session cookies ed è collegato a decine di milioni di email di phishing e circa 96.000 vittime nei settori education, healthcare e government locale. Coinbase ha contribuito tracciando pagamenti blockchain e sono in corso azioni legali contro presunti operatori.

12 fonti · 6 mar

Cronologia

• 6 mar Segnalato da Graham Cluley
• 5 mar Segnalato da Dark Reading
• 4 mar Segnalato da CyberScoop

Fonti

• 6 mar Graham Cluley

  How hackers bypassed MFA with a $120 phishing kit - until a global takedown shut it down

  In a co-ordinated public-private operation between law enforcement agencies and cybersecurity industry partners one of the world's most prolific phishing-as-a-service platforms has been dismantled.

  originale

• 5 mar Dark Reading

  Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform

  The phishing-as-a-service platform was popular among cyber threat actors because of its ability to bypass multi-factor authentication defenses.

  originale

• 5 mar The Record from Recorded Future

  Police dismantle major phishing platform blamed for attacks on hospitals and schools

  International law enforcement agencies have dismantled a major phishing-as-a-service platform used to target hundreds of thousands of accounts worldwide, including those tied to hospitals and schools, Europol said Wednesday.

  originale

Part of the PlainSec briefing for 2026-03-05

Every edition of this story: Coalizione globale smantella Tycoon 2FA, interrotta piattaforma phishing