Law enforcement and security firms take down huge PhaaS platform | IT Pro

Microsoft and Europol, alongside security firms, have successfully dismantled the Tycoon 2FA phishing-as-a-service (PhaaS) platform, which used adversary-in-the-middle techniques to bypass multi-factor authentication and steal session cookies. The platform, responsible for millions of phishing messages monthly, offered a complete ecosystem for cybercriminals, enabling large-scale account compromise and business email compromise attacks.