importantSYS.SOURCE: The Hacker News• 2026-07-22T12:08:45+05:30
Law Enforcement Disrupts Kratos Phishing Kit Targeting Microsoft 365 Authentication
Law enforcement dismantled the Kratos phishing kit, which stole Microsoft 365 session cookies to bypass MFA, affecting hundreds of thousands of users globally. The operation, operating as a franchise, used a reverse-proxy method to intercept logins in real-time, with operators earning over €300,000 since 2024.
German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the world's most widely used criminal phishing kits, and Indonesian authorities arrested the man they say developed and ran it.
In a joint announcement on Monday, the Frankfurt public prosecutor's cybercrime unit (ZIT) and Germany's Federal Criminal Police Office (BKA)
*** END OF TRANSMISSION ***