Europol and Microsoft dismantle major phishing platform that affected 500 Belgian victims

In early March, Microsoft, Europol and several other partners carried out a coordinated operation against Tycoon 2FA, one of the world’s largest phishing platforms. In Belgium, the phishing platform affected around 500 victims, both individuals and businesses.
According to Europol and Microsoft, Tycoon 2FA is linked to more than 96,000 victims worldwide, including over 55,000 Microsoft customers. Many of the hardest-hit markets are in Europe, including the United Kingdom, France, Germany, Italy, the Netherlands and Sweden. Tycoon 2FA has been active since at least 2023 and differs from ordinary phishing in that it can also bypass multi-factor authentication (MFA).
As part of a legal operation, Microsoft seized 330 domains that formed the core infrastructure of the phishing platform. “The operation was carried out for the first time in coordination with Europol. This underlines the importance of cross-border public-private cooperation in the fight against cybercrime,” emphasised Bart Asnot, North Europe security leader at Microsoft.
Police forces from Latvia, Lithuania, Portugal, Poland, Spain and the United Kingdom also participated in the operation. Arrests were made in Egypt and Nigeria, and the developer was identified in Pakistan. In Belgium, the operation involved collaboration with, amongst others, the Federal Computer Crime Unit (FCCU).
According to Microsoft, Tycoon 2FA targeted amongst others hospitals, research institutions and government bodies, sectors with a direct social impact in Belgium.
“The dismantling of Tycoon 2FA demonstrates how important it is for technology companies, police forces and the judiciary to act together against organised cybercrime. By taking down the infrastructure of such a platform, we are protecting not only businesses and public authorities, but also citizens. This is an example of how global cooperation has a direct impact on digital security in Belgium,” said Asnot.
Illustration © PHOTO Philip Dulian/dpa
Related news