Phishing-as-a-Service Platforms LabHost and Frappo Help Threat Actors Target Canadian Banks

The report highlights growth in phishing-as-a-service platforms (notably Frappo and LabHost) since 2021 that enable turnkey phishing campaigns against Canadian banks—handling delivery, impersonated pages, MITM MFA interception, and tiered offerings by geography—citing a LabHost outage that correlated with a drop in attacks and recommending security awareness training to reduce victimization.