German authorities lead takedown of Kratos phishing platform

https://image.theregister.com/247812.jpg?imageId=247812&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

Kratos phishing-as-a-service kit loses its battle with international law enforcement

Alleged developer arrested in Indonesia after more than 200 servers slain

German authorities say they have neutralized the main infrastructure supporting the Kratos phishing-as-a-service (PhaaS) kit following an operation supported by the US and Indonesia.

Officers from Frankfurt am Main's Central Office for Combating Internet Crime (ZIT) and the Federal Criminal Police (BKA) described Kratos as one of the most widespread and dangerous PhaaS kits on the market.

In Indonesia, authorities said they arrested the Kratos kit's alleged "developer and technical administrator." The announcement of Kratos's takedown did not mention whether any other individuals are being pursued.

According to the ZIT and BKA, Kratos allowed low-skill cybercrims to harvest credentials, including passwords and session cookies, to bypass MFA by providing them with convincing Microsoft-themed phishing pages.

Criminals using Kratos phishing pages targeted hundreds of thousands of victims across more than...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE