logo

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns

ID: 77650cb0-eb19-5430-835e-ac628927de6f

STIX ID: report--77650cb0-eb19-5430-835e-ac628927de6f

Feed Name: Help Net Security

Threat Score
70/100

Date Published: 2026-07-22

Date Updated: 2026-07-22

Author: Sinisa Markovic

...
...

German and US law enforcement dismantled Kratos, a widely used phishing-as-a-service platform; its alleged developer was arrested in Indonesia and authorities seized 200 servers. Kratos reportedly enabled about 1,800 criminal franchisees to run ~15,000 Microsoft-themed phishing campaigns per month across 35 countries, facilitating widespread credential theft and generating at least €300,000 in subscription fees.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.