[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzSWJKNjauYPuSnD8sqeMDc9oQa_0A8p1XeSh1zjcmPI":3},{"article":4,"iocs":32,"watch_terms":36},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"5b2543f0-2132-42bc-a218-38774d2d7294","Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale","inside-tycoon2fa-how-a-leading-aitm-phishing-kit-operated-at-scale","Tycoon2FA has become a leading phishing-as-a-service (PhaaS) platforms, enabling campaigns that reach over 500,000 organizations monthly, prompting Microsoft’s Digital Crimes Unit (DCU) to work with Europol and industry partners to facilitate a disruption of Tycoon2FA’s infrastructure and operations. The post Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale appeared first on Microsoft Security Blog.","Tycoon2FA is a leading phishing-as-a-service (PhaaS) platform operating an Adversary-in-the-Middle (AiTM) attack infrastructure targeting over 500,000 organizations monthly. Microsoft's Digital Crimes Unit coordinated with Europol and industry partners to disrupt the platform's infrastructure and operations.",null,"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2026\u002F03\u002F04\u002Finside-tycoon2fa-how-a-leading-aitm-phishing-kit-operated-at-scale\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002Fwp-content\u002Fuploads\u002F2026\u002F03\u002FTycoon2FA-featured.png","2026-03-04T16:04:24+00:00","2026-03-15T06:36:25.716027+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":17,"icon":10,"name":19,"slug":20},"Malware","malware",[22,27],{"category":23},{"id":24,"icon":10,"name":25,"slug":26},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":28},{"id":29,"icon":10,"name":30,"slug":31},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[33],{"type":20,"value":34,"context":35},"Tycoon2FA","Leading phishing-as-a-service (PhaaS) platform with AiTM capabilities",[]]