Tycoon 2FA Phishing Platform Dismantled in Global Takedown
2026-03-04T19:24:06Z•4e86e40d5387adb149f476c71712ee812d99a5f382e5c5817f0041567deb82dc
2fa-phishing6g-securityacquisitionai-securitybrowser-updateschromecredential-theftcryptominercyberinsurancedata-breachlastpasslexisnexismalwarephishingphishing-as-a-servicepirated-softwareransomwaretakedown
What happened
Multiple notable security developments: law enforcement globally dismantled the Tycoon phishing-as-a-service platform used to carry out large-scale 2FA phishing campaigns (fraudulent emails reportedly sent to ~500,000 organizations per month). LexisNexis confirmed a data breach with ~2 GB of stolen files and roughly 400,000 personal records leaked. LastPass warned of a new phishing campaign spoofing alerts about unauthorized access or master password changes, while a separate story highlights how pirated/cracked software is being used to deliver malware (credential theft, cryptominers, and as
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 4e86e40d5387adb149f476c71712ee812d99a5f382e5c5817f0041567deb82dc
- Enrichment time
- 2026-03-04T19:24:06Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.