tycoon2fa

AI-Written Phishing Emails Get Clicked 450% More Often. The Data Is In.

John Z Black Apr 6, 2026

AI Security #ai #phishing #microsoft #rsac-2026 #tycoon2fa #mfa-bypass #social-engineering

Microsoft telemetry shows AI-assisted phishing lures hit a 54% click-through rate versus 12% for traditional campaigns, a 450% increase that breaks conventional security awareness training.

Europol Took Down Tycoon2FA. It Was Back in Days, and Smarter Than Before.

John Z Black Mar 31, 2026

Ransomware & Cybercrime #phishing #tycoon2fa #phishing-as-a-service #microsoft-365 #entra-id #conditional-access #mfa #aitm #europol #crowdstrike

Tycoon2FA's rapid return after Europol's March 4 takedown shows why seizing infrastructure doesn't shut down phishing platforms. The operators pre-staged backup infrastructure before the first domain was seized.

Tycoon2FA Is Back. It Never Really Left.

John Z Black Mar 24, 2026

Ransomware & Cybercrime #tycoon2fa #phishing-as-a-service #phaas #mfa-bypass #europol #crowdstrike

Europol disrupted Tycoon2FA on March 4. Recovery started the same day. No arrests. By March 23 it was fully operational again. Here's why infrastructure-only takedowns keep failing.