https://securityaffairs.com/189205/cyber-crime/law-enforcement-disrupted-tycoon-2fa-phishing-as-a-service-platform.html
#securityaffairs #hacking
«Takedown von MFA-Bypass-Plattform Tycoon2FA
[…] Die Zerschlagung unterstreicht eine klare Botschaft: MFA allein reicht gegen Adversary-in-the-Middle-Phishing nicht aus. […]»
Ich ärgere mich darüber immer wider, dass die betroffene Konzerne darüber sehr still kommunizieren.
🔓 https://borncity.com/blog/2026/03/08/takedown-von-mfa-bypass-plattform-tycoon2fa/
#mfa #login #web #websicherheit #2fa #internet #tycoon2fa #europol #Cloudflare #Coinbase #Crowell #eSentire #HealthISAC #Intel471 #Microsoft #Proofpoint #Resecurity #Shadowserver #SpyCloud #bypass
🎣 Authorities have seized over 300 domains and dismantled the #Tycoon2FA phishing kit used by attackers to bypass MFA in targeted attacks against businesses.
Read: https://hackread.com/tycoon-2fa-phishing-platform-shut-down-bypass-mfa/
Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale - https://www.redpacketsecurity.com/inside-tycoon2fa-how-a-leading-aitm-phishing-kit-operated-at-scale/
#Europol-coordinated action disrupts #Tycoon2FA #phishing platform
🥂 🍾 Tycoon down!
"Global phishing-as-a-service platform taken down in coordinated public-private action"
A major phishing-as-a-service platform used to bypass multi-factor authentication (MFA) and enable large-scale account compromise has been disrupted following a coordinated international operation supported by Europol.
The service, known as Tycoon 2FA, provided cybercriminals with a subscription-based toolkit designed to intercept live authentication sessions and gain unauthorised access to online accounts, including those protected by additional security layers."
👇
https://www.europol.europa.eu/media-press/newsroom/news/global-phishing-service-platform-taken-down-in-coordinated-public-private-action
"Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations"
👇
https://www.trendmicro.com/en_us/research/26/c/tycoon2fa-takedown.html
Phishing-Plattform Tycoon 2FA zerschlagen: Europol koordiniert internationalen Behördeneinsatz

Europol hat mit Partnern aus Industrie und Behörden die Phishing-Plattform Tycoon 2FA abgeschaltet – 330 Domains, Millionen Angriffe betroffen.