Microsoft reports lower Tycoon2FA volumes and rising Teams calls

Microsoft’s 23 July email-threat review said phishing volume associated with Tycoon2FA fell 92% from its pre-disruption average during the second quarter. Researchers reported approximately 7.6 billion email-based phishing threats overall in their telemetry. The platform had not recovered its earlier scale during the period examined.

The same report described growth in Teams-based social engineering, with weekly malicious calling attempts reaching nearly ten times the mid-2025 baseline by quarter-end. These measurements cover different channels and baselines. A reduction linked to one phishing service can coexist with growing attempts elsewhere. The company’s observations therefore support reviewing workplace calling and support-verification practices alongside email controls, rather than reading the takedown as the end of the broader phishing problem.