Europol-Led Multinational Operation Dismantles Major Phishing Platform Tycoon 2FA

Tycoon 2FA is a major phishing-as-a-service (PhaaS) platform that provides criminal groups with ready-made tools for adversary-in-the-middle attacks targeting Microsoft 365 and Google accounts. The attacks intercept passwords and multi-factor authentication data, lowering the barrier to online fraud and increasing cybersecurity risks worldwide.

Europol joined Microsoft, Coinbase, Trend Micro and other organizations in a multinational law-enforcement operation. Reports published on March 5 said the operation had blocked more than 330 malicious domains. Tycoon 2FA lost its dominant market position after the crackdown, but total attacks rose 15% when activity involving other phishing tools was included.