Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
The basic infrastructure of Kratos, which German investigators describe as one of the most popular criminal phishing kits in the world, has been taken down by German and US law enforcement, and Indonesian police have detained the man they claim created and operated it.
More than 200 servers were taken offline, according to a joint announcement made on Monday by Germany's Federal Criminal Police Office (BKA) and the Frankfurt public prosecutor's cybercrime unit (ZIT). Investigators estimate that Kratos was used by about 1,800 paying customers to conduct roughly 15,000 phishing operations each month.
More than just credentials were harvested by Kratos. According to the BKA, the kit was made to steal both the login and the session cookie, which is sufficient to get past two-factor veri...