The Rise of Kratos: How the New Phishing-as-a-Service Kit Industrializes Cybercrime

KnowBe4 Threat Labs analyzed the Kratos Phishing-as-a-Service (PhaaS) kit — a modular, high-volume phishing platform observed in early 2026 — detailing its decoupled architecture, anti-analysis controls, Telegram-based real-time credential exfiltration, payload generator (links, QR, EML, ICS, attachments), Adobe-themed social engineering lures, targeted geographic filtering, and administrative dashboard; the report provides IOCs (domain, path, IP, geolocation service, subject patterns), MITRE mappings, and layered defense recommendations focused on phishing-resistant authentication and human risk management.