Law enforcement disrupted Tycoon 2FA phishing-as-a-service platform

Law enforcement, led by Microsoft and Europol with industry partners, disrupted the Tycoon 2FA phishing‑as‑a‑service operation that was responsible for tens of millions of fraudulent emails and targeted over 500,000 organizations worldwide; Resecurity had previously gained access to the platform, which enabled thousands of criminals to bypass defenses using techniques such as URL rotation via open redirect abuse and misuse of Cloudflare Workers, and the service accounted for roughly 62% of phishing attempts Microsoft blocked at its peak.