Malware · 238 giorni fa
Europol e Microsoft hanno smantellato l'infrastruttura core di Tycoon 2FA. Il servizio in abbonamento eseguiva AiTM per catturare credenziali, OTP e session cookies ed è collegato a decine di milioni di email di phishing e circa 96.000 vittime nei settori education, healthcare e government locale. Coinbase ha contribuito tracciando pagamenti blockchain e sono in corso azioni legali contro presunti operatori.
12 fonti che coprono questa storia
How hackers bypassed MFA with a $120 phishing kit - until a global takedown shut it down
In a co-ordinated public-private operation between law enforcement agencies and cybersecurity industry partners one of the world's most prolific phishing-as-a-service platforms has been dismantled.
Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform
The phishing-as-a-service platform was popular among cyber threat actors because of its ability to bypass multi-factor authentication defenses.
The Record from Recorded Future
Police dismantle major phishing platform blamed for attacks on hospitals and schools
International law enforcement agencies have dismantled a major phishing-as-a-service platform used to target hundreds of thousands of accounts worldwide, including those tied to hospitals and schools, Europol said Wednesday.
Europol-Led Operation Takes Down Tycoon 2FA Phishing-as-a-Service Linked to 64,000 Attacks
Authorities dismantle Tycoon 2FA phishing service linked to 64,000 attacks, millions of emails, and breaches at nearly 100,000 organizations worldwide
Microsoft, Europol disrupt global phishing platform Tycoon 2FA
The service helped cybercriminals bypass multifactor authentication and led to business email compromise and ransomware.
Authorities pull plug on Tycoon 2FA phishing-as-a-service platform - Help Net Security
Law enforcement and cybersecurity partners carried out a takedown targeting Tycoon 2FA, a phishing-as-a-service platform used to bypass MFA.
Global coalition dismantles Tycoon 2FA phishing kit
Microsoft, which led the effort, said it seized 330 domains that powered the phishing platform’s core infrastructure.
Microsoft leads takedown of Tycoon2FA phishing service infrastructure
The SaaS operation was used to push millions of malicious emails a month.
Tycoon 2FA Phishing Platform Dismantled in Global Takedown
The phishing-as-a-service platform was used to send fraudulent emails to over 500,000 organizations every month.
Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale | Microsoft Security Blog
Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 organizations monthly, prompting Microsoft’s Digital Crimes Unit (DCU) to work with Europol and industry partners to facilitate a disruption of Tycoon2FA’s infrastructure and operations.
Global Takedown Neutralizes Tycoon2FA Phishing Service
Law enforcers and industry partners have taken down notorious phishing-as-a-service platform Tycoon2FA
Global coalition dismantles Tycoon 2FA phishing kit
Microsoft, which led the effort, said it seized 330 domains that powered the phishing platform’s core infrastructure.
Part of the PlainSec briefing for 2026-03-06