Global Coalition Dismantles Tycoon 2FA’s Phishing Empire

Microsoft, Europol, and industry partners disrupted Tycoon 2FA, a global Phishing-as-a-Service platform that used Adversary-in-the-Middle proxies to bypass multi-factor authentication and enable large-scale account takeovers; 330 malicious domains were taken offline after the service—responsible for a major share of phishing attacks—targeted over 500,000 organizations monthly, impacted multiple industry sectors, and prompted coordinated legal and law-enforcement actions across several countries.