Tycoon2FA

Reported Context (4)

The effects of the March disruption of the Tycoon2FA phishing-as-a-service (PhaaS) platform also remained evident. Microsoft details email phishing trends and campaigns in Q3 2026
Other examples include Tycoon2FA, Venom, and CYB3R. Kali365 Phishing Kit Expands Beyond Microsoft 365 to Target More Services
This adoption includes the EvilTokens PhaaS and Tycoon2FA, which are also using it to compromise Microsoft 365 and Entra accounts. FBI Warns Kali365 Phishing Service Targets Microsoft 365 Accounts
Disruption of the Tycoon2FA PhaaS in early March reduced access to active phishing pages and email volumes temporarily, though the actor adapted by changing hosting providers and TLD registration patterns. Microsoft Details Q1 2026 Email Threat Trends, Including QR-Code and CAPTCHA Phishing Surge

Malware (1)

Threat Actors (2)

MITRE ATT&CK (11)

Vendors (2)

Products (15)

Tools (5)

Industries (4)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.