{"id":233938,"date":"2026-03-24T03:22:13","date_gmt":"2026-03-24T08:22:13","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/03\/tycoon2fa-phishing-platform-returns-after-recent-police-disruption"},"modified":"2026-03-24T03:22:13","modified_gmt":"2026-03-24T08:22:13","slug":"tycoon2fa-phishing-platform-returns-after-recent-police-disruption","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/03\/tycoon2fa-phishing-platform-returns-after-recent-police-disruption","title":{"rendered":"Tycoon2FA phishing platform returns after recent police disruption"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/tycoon2fa-phishing-platform-returns-after-recent-police-disruption.jpg\"><\/a><\/p>\n<p>The Tycoon2FA phishing-as-a-service (PhaaS) platform that Europol and partners disrupted on March 4 has already returned to previously observed activity levels.<\/p>\n<p>Microsoft led the technical disruption, which involved <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/europol-coordinated-action-disrupts-tycoon2fa-phishing-platform\/\" target=\"_blank\" rel=\"nofollow noopener\">seizing 330 domains<\/a> part of Tycoon2FA\u2019s backbone infrastructure that included control panels and phishing pages used in attacks.<\/p>\n<p>However, the disruption caused by the law enforcement was short-lived, as CrowdStrike noticed the cybercrime service return to normal operational volumes within days.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Tycoon2FA phishing-as-a-service (PhaaS) platform that Europol and partners disrupted on March 4 has already returned to previously observed activity levels. Microsoft led the technical disruption, which involved seizing 330 domains part of Tycoon2FA\u2019s backbone infrastructure that included control panels and phishing pages used in attacks. However, the disruption caused by the law enforcement was [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,1493],"tags":[],"class_list":["post-233938","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-law-enforcement"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/233938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=233938"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/233938\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=233938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=233938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=233938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}