Home
/
Crypto news
/
Latest news
/

Coinbase and microsoft take down major phishing platform

Coinbase + Microsoft | Big Blow to Global Phishing Operations

By

Fatima Al-Farsi

Mar 5, 2026, 01:33 PM

2 minutes of duration

Coinbase and Microsoft logos with a graphic representation of a phishing attack being disrupted

Coinbase and Microsoft Team Up Against Cyber Crime

A joint effort by Coinbase and Microsoft, along with Europol and other partners, has led to a significant disruption of a phishing-as-a-service platform known as "Tycoon 2FA." This operation was known for facilitating massive credential theft and bypassing multi-factor authentication (MFA).

How Tycoon 2FA Operated

Tycoon enabled hackers to easily steal user credentials and session tokens, allowing them to execute account takeovers and commit fraud at an alarming scale. The implications of such a platform's activities are far-reaching, affecting countless people globally.

"This disruption dismantled key parts of Tycoon’s infrastructure, significantly reducing its operational threat," a source said.

Key Actions Taken

Coinbase played a crucial role in tracking payments to the Tycoon platform, enabling them to identify its administrator. This led to a series of legal actions, including domain seizures by Microsoft.

Impacts on Criminal Operations

The fallout from this operation forces criminals behind Tycoon to rethink their strategies and rebuild their operations from the ground up. Many are left wondering: how long will it take for them to regroup?

Sentiment Among Cybersecurity Experts

Responses from cybersecurity experts highlight a mixed sentiment. While some view this as a positive step forward, others caution that new phishing services may emerge quickly to fill the void left by Tycoon.

  • βœ… "This is a major win for cybersecurity," noted one expert.

  • ⚠️ "Expect new platforms to pop up in no time," warned another.

Key Takeaways

  • πŸš€ Major collaboration among Coinbase, Microsoft, and Europol achieved significant takedown of Tycoon 2FA.

  • πŸ’° Coinbase successfully traced cryptocurrency payments, helping to identify Tycoon’s admin.

  • πŸ“‰ This operation posed a major setback for cybercriminals, forcing them to rebuild their platforms.

In the fast-paced world of cybercrime, monitoring these developments is critical for all involved parties. This situation reiterates the ongoing battle between security services and cybercriminals.

What's Next for Cybercrime?

There’s a strong chance that cybercriminals will quickly adapt to this disruption. Experts estimate around 60% of phishing groups could regroup within the year as they leverage new technologies and strategies to bypass security measures. As law enforcement continues to crack down on these operations, we may see a proliferation of underground forums where criminals seek to innovate and share resources. Monitoring these user boards for emerging trends will be crucial for cybersecurity professionals and everyday people alike.

A Lesson from History's Underground

A remarkable parallel can be drawn from the Prohibition era, where the ban on alcohol didn't eliminate demand but gave rise to underground bootlegging operations. Just as speakeasies flourished in hidden corners of cities, we might expect the next generation of phishing operations to operate more stealthily, adapting to tighter regulations while still capitalizing on the underlying desire for quick access to illicit gains. This shift could lead to a new, more sophisticated form of cybercrime that is harder to detect, emphasizing the need for constant vigilance in the ever-evolving digital landscape.