Coinbase, Microsoft disrupt Tycoon 2FA phishing network linked to credential theft
Coinbase, in collaboration with Microsoft, Europol, and other partners, has successfully disrupted the Tycoon 2FA phishing-as-a-service platform. This criminal toolkit enabled attackers to steal login credentials and bypass multi-factor authentication (MFA) by using cloned login pages that mimicked trusted services like Microsoft 365. The operation involved seizing key domains through legal action and dismantling the infrastructure powering the service.
Coinbase's investigation traced cryptocurrency payments funding the platform, which operated on a subscription model, and attributed its administration to an individual based in Pakistan. The takedown highlights the significant threat phishing poses to the crypto sector, where social engineering remains a major cause of financial losses. This coordinated effort targeted both the operational infrastructure and the financial networks supporting such cybercrime.
ambcrypto03/04 17:06
