Saad Tycoon
- Primary motivation
- financial-gain
- Sophistication
- intermediate
- Resource level
- individual
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:14:46
Targeted industries: financial-services
Context
Saad Tycoon is the operator and alleged developer of the Tycoon 2FA PhaaS, a phishing service that targets users for financial gain. The actor utilizes Bitcoin transactions to generate significant profits from the fraudulent service. The phishing infrastructure includes domain registration, server hosting, and possibly Cloudflare protection.
Reports & references
- blog.sekoia.io — Tycoon 2Fa An In Depth Analysis Of The Latest Version Of The Aitm Phishing Kit (report)