Kratos phishing-as-a-service-kit loses its battle with international law enforcement

2026-07-22

German and US-backed investigators shut down more than 200 servers tied to the Kratos phishing kit and arrested its alleged developer in Indonesia. Kratos helped low-skill attackers steal Microsoft 365 credentials and bypass MFA, enabling large campaigns across the US and Europe.