Tycoon2FA operators resume cloud account phishing after infrastructure disruption
VPN Central [Unofficial]
March 25, 2026
Tycoon2FA is already back in action after the March 4 takedown. CrowdStrike says the phishing-as-a-service platform resumed cloud account phishing within days of the Europol-led disruption, with activity quickly returning to levels seen before the operation. That makes the takedown look more like a temporary setback than a lasting shutdown. Europol said authorities and private-sector […]
The post Tycoon2FA operators resume cloud account phishing after infrastructure disruption appeared first on VPN Central.
Discussion in the ATmosphere