Police dismantle Kratos phishing kit used to steal Microsoft 365 sessions

German and US investigators took down Kratos, a widely used phishing-as-a-service platform, and Indonesian police arrested its alleged developer.

Police dismantle Kratos phishing kit used to steal Microsoft 365 sessions

Law enforcement agencies in Germany and the United States dismantled the Kratos phishing platform, described as one of the world's most widely used criminal phishing kits.

Authorities seized more than 200 servers and said roughly 1,800 paying customers had used the service for about 15,000 campaigns a month.

Source: InfoSec Today / BKA, July 2026.