External Publication
Visit Post

Tycoon2FA operators resume cloud account phishing after infrastructure disruption

VPN Central [Unofficial] March 25, 2026
Source
Tycoon2FA is already back in action after the March 4 takedown. CrowdStrike says the phishing-as-a-service platform resumed cloud account phishing within days of the Europol-led disruption, with activity quickly returning to levels seen before the operation. That makes the takedown look more like a temporary setback than a lasting shutdown. Europol said authorities and private-sector […] The post Tycoon2FA operators resume cloud account phishing after infrastructure disruption appeared first on VPN Central.

Discussion in the ATmosphere

Loading comments...