Authorities Shut Down Phishing Empire Launching 15,000 Attacks Every Month

Authorities dismantled Kratos, a major phishing-as-a-service platform used to run roughly 15,000 phishing campaigns per month and leased to an estimated 1,800 criminal customers; investigators arrested the alleged developer/technical administrator, neutralized over 200 servers, and identified around 850 victims across 35 countries, primarily in Europe and the United States. The service mimicked Microsoft authentication portals to harvest credentials, enabling downstream business email compromise, account takeover and fraud, and the takedown included disabling the platform’s central infrastructure.