Tycoon 2FA Phishers Scatter, Adopt Device Code Phishing

After a law-enforcement takedown of the Tycoon 2FA PhaaS, threat actors scattered to competitors such as Mamba 2FA, EvilProxy and Sneaky 2FA, driving sharp increases in phishing volume (millions of attacks per month) and an observable rise in device-code/OAuth phishing kits that reuse Tycoon artifacts and tactics — indicating a large-scale, active phishing threat that is evolving to bypass MFA.