Coinbase’s Collaborative Security Triumph: A Major Blow to Cybercrime

In a landmark demonstration of cross-sector collaboration, leading cryptocurrency exchange Coinbase has partnered with tech giant Microsoft and international law enforcement agency Europol to successfully dismantle a sophisticated phishing-as-a-service operation known as 'Tycoon 2FA.' This coordinated takedown, executed under a U.S. court order, represents a significant victory for cybersecurity and highlights the proactive role major crypto entities are playing in protecting the broader digital ecosystem. The operation neutralized a critical threat that had been targeting hundreds of thousands of organizations globally by bypassing crucial multi-factor authentication (MFA) protections. The 'Tycoon 2FA' platform was a notorious service sold to cybercriminals, enabling them to launch massive phishing campaigns. It specialized in creating counterfeit login pages designed to steal user credentials and, most critically, the one-time codes generated by MFA systems. This technique, known as an 'adversary-in-the-middle' attack, allowed threat actors to completely circumvent a key security layer trusted by millions of users and businesses for securing email, cloud, and financial accounts—including cryptocurrency exchange accounts. At its peak, the service was linked to the distribution of millions of fraudulent emails each month, targeting over half a million organizations and posing a direct threat to individual and corporate digital asset security. For Coinbase, this operation is not an isolated incident but a core part of its security philosophy. As a regulated and publicly-traded entity holding billions in customer assets, Coinbase invests heavily in both defensive measures and offensive threat intelligence. By collaborating with traditional tech leaders and global law enforcement, Coinbase strengthens the security infrastructure that the entire cryptocurrency industry relies upon. This action sends a powerful message that the industry's leading players are committed to legitimizing the space by actively hunting threats that endanger all internet users, not just their own customer base. The seizure of 330 active domains associated with Tycoon 2FA has created a substantial disruption in the cybercriminal supply chain, making it harder and more expensive for attackers to obtain the tools needed to compromise accounts. This proactive stance is essential for fostering trust and encouraging institutional adoption, as it shows that crypto platforms are at the forefront of combating the same financial cybercrimes that challenge traditional finance. Ultimately, this collaboration underscores a maturing industry where major players like Coinbase are integral partners in the global fight for a more secure digital future.

Coinbase, Microsoft, Europol Shut Down Tycoon 2FA Phishing Service

Coinbase joined forces with Microsoft, Europol, and ten other partners to dismantle Tycoon 2FA, a phishing-as-a-service platform responsible for millions of fraudulent emails targeting over 500,000 organizations monthly. The operation, led by Microsoft, seized 330 active domains under a U.S. court order, disrupting a network that bypassed multi-factor authentication to exploit email and online service accounts.

Tycoon 2FA operated more than 24,000 domains since its 2023 launch, enabling thousands of threat actors to steal credentials at scale. Coinbase traced cryptocurrency payments funding the operation, supporting civil action to seize domains. The primary developer, Saad Fridi, was identified in Pakistan, while efforts continue to pursue buyers of the service.

Morgan Stanley Partners with Coinbase, BNY Mellon for Bitcoin ETF Venture

Wall Street giant Morgan Stanley is accelerating its cryptocurrency strategy by naming Coinbase and Bank of New York Mellon (BNY Mellon) as key partners for its proposed bitcoin exchange-traded fund. The amended SEC filing reveals Coinbase Custody and BNY Mellon will serve as dual custodians for the Morgan Stanley Bitcoin Trust, with BNY Mellon additionally handling fund administration and cash custody.

The move signals deepening institutional infrastructure for digital assets, with Coinbase acting as prime broker. Like existing spot Bitcoin ETFs, the fund will track BTC's market price without requiring direct ownership. Notably, this marks a strategic pivot for Morgan Stanley, which had previously avoided crypto products despite maintaining 20 ETF offerings.