Europol-Led Operation Takes Down Tycoon 2FA Phishing-as-a-Service Linked to 64,000 Attacks

Source: The Hacker News

Overview

Tycoon 2FA, one of the prominent phishing‑as‑a‑service (PhaaS) toolkits that allowed cybercriminals to stage adversary‑in‑the‑middle (AiTM) credential‑harvesting attacks at scale, was dismantled by a coalition of law‑enforcement agencies and security companies.

The subscription‑based phishing kit, which first emerged in August 2023, was described by Europol as one of the largest phishing operations ever uncovered.