Threat actorPakistanTracked since 2026-03

Saad Fridi

Also known as:SaaadFridiMr_XaadTycoon2FA Operators

As of 2026-05-30, Saad Fridi is a Pakistan-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning phishing. Also known as SaaadFridi, Mr_Xaad, Tycoon2FA Operators.

Tracked threats: 11 critical
First seen: 2026-032026-03-20
Last seen: 2026-032026-03-20
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: PakistanNation or origin

Nation: Pakistan · 1 tracked threat(s) · Categories: PHISHING

Activity timeline

Saad Fridi appears in 1 tracked threat between 2026-03-20 and 2026-03-20.

Tracked threats

Tycoon2FA Phishing-as-a-Service Platform Persists Post-Europol Takedown with Rapid Infrastructure RecoveryCRITICAL2026-03-20