Coinbase, Microsoft and Europol Team Up to Dismantle Tycoon 2FA Phishing Platform

Tycoon 2FA was a phishing-as-a-service platform that provided criminals with fake login pages and adversary-in-the-middle attack tools. These could intercept login credentials and one-time passcodes, allowing attackers to bypass multifactor authentication. The collaboration among Coinbase, Microsoft and Europol also underscored how cryptocurrency flows can provide important leads in cybercrime investigations.

Coinbase recently helped Microsoft and Europol dismantle Tycoon 2FA’s core infrastructure. By tracing blockchain transactions, it also helped identify the platform’s administrators and customers. Available information on the operation does not specify its exact date, the value of assets seized, the number of victims or the total value of transactions involved. Those figures have yet to be released by law enforcement.