Microsoft, Europol take down global phishing as a service network which was able to bypass 2FA with ease

Date:
Thu, 05 Mar 2026 10:01:38 +0000

Description:
Tycoon 2FA is no more thanks to a major law enforcement operation.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Get the TechRadar Newsletter Sign up for
breaking news, reviews, opinion, top tech deals, and more. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are
now subscribed Your newsletter sign-up was successful An account already exists for this email address, please log in. Subscribe to our newsletter Europol leads multinational operation against Tycoon 2FA Platform enabled large-scale phishing with MFA bypass Authorities dismantled core infrastructure and seized domains Tycoon 2FA, one of the largest phishing-as-a-service (PhaaS) platforms in the world, has been taken down after a global coordinated law enforcement operation.

The operation was led by Europol , and included police forces from Latvia, Lithuania, Portugal, Poland, Spain, and the United Kingdom. It successfully dismantled a phishing operation that was active since at least August 2023, and enabled thousands of cybercriminals to access email and cloud-based service accounts. You may like Microsoft hits global virtual desktop cybercrime phishing platform - 'RedDVS' caused phishing chaos and resulted in millions of losses Europol takes down crypto and laundering network worth 700 million Europol cracks down on violence-as-a-service network Hundreds of domains taken down In the operation, law enforcement took down 330 domains that formed the core infrastructure of the service, which included phishing portals and backend control panels used by attackers to manage campaigns.

A number of private organizations helped, as well, including Cloudflare, Coinbase, Intel471, Microsoft , Proofpoint, Shadowserver Foundation,
SpyCloud, and Trend Micro.

Some researchers claim the platform is very popular in the underground community. Apparently, between August 2023 (when it first launched) and March 2024, the Bitcoin wallet linked to the operation raked in more than $400,000 worth of cryptos at the time.

Tycoon 2FA operated as an adversary-in-the-middle (AiTM) attack, intercepting login credentials and session cookies to gain unauthorized access to user accounts, even those secured with MFA. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Europol says Tycoon 2FA generated tens of millions of phishing emails each month, and facilitated unauthorized access to nearly 100,000 organizations globally, including schools, hospitals, and public institutions.

Throughout the years, it has been actively supported, and has been receiving updates and upgrades regularly. Its last major upgrade was in April 2025, to allow for better evasion of manual and static pattern-matching analysis, bypass fingerprinting and flagging, and for detecting browser automation tools.

By mid-2025, Tycoon 2FA accounted for roughly two-thirds (62%) of all
phishing attempts blocked by Microsoft, Europol stressed.

The platform is sold on underground forums, with prices starting at $120 for 10 days of access, making it accessible to a wide range of cybercriminals.
The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/microsoft-europol-take-down-global-phis hing-as-a-service-network-which-was-able-to-bypass-2fa-with-ease


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)