Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

Law enforcement agencies in Germany and the US have dismantled the core infrastructure of a phishing kit known as Kratos. Kratos is considered one of the most widely used criminal phishing kits globally, according to German investigators. The kit was designed to steal Microsoft 365 sessions and bypass multi-factor authentication. Authorities in Indonesia have arrested the individual believed to be responsible for developing and operating Kratos. The takedown was announced jointly by the Frankfurt public prosecutor's cybercrime unit and Germany's Federal Criminal Police Office.