logo

When MFA Fails – Inside the Tycoon2FA Phishing Platform

ID: b2e3e1d0-8e60-59ea-88db-f87193006fc1

STIX ID: report--b2e3e1d0-8e60-59ea-88db-f87193006fc1

Feed Name: Expert Intel – Stripe OLT

Threat Score
75/100

Date Published: 2026-04-10

Date Updated: 2026-07-16

Author: Jonathan Swift

...
...

Tycoon2FA is a phishing-as-a-service platform that enables large-scale adversary-in-the-middle (AiTM) and device-code phishing campaigns to capture credentials and session tokens and bypass multifactor authentication; it has been used since August 2023 against sectors including education, healthcare, finance, government and non-profits and reportedly sent tens of millions of messages monthly impacting hundreds of thousands of organisations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.