MalwareMar 4, 2026
Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale
Tycoon2FA is a leading phishing-as-a-service (PhaaS) platform operating an Adversary-in-the-Middle (AiTM) attack infrastructure targeting over 500,000 organizations monthly. Microsoft's Digital Crimes Unit coordinated with Europol and industry partners to disrupt the platform's infrastructure and operations.
Summary
Tycoon2FA is a leading phishing-as-a-service (PhaaS) platform operating an Adversary-in-the-Middle (AiTM) attack infrastructure targeting over 500,000 organizations monthly. Microsoft's Digital Crimes Unit coordinated with Europol and industry partners to disrupt the platform's infrastructure and operations.
Indicators of Compromise
- malware — Tycoon2FA