Back Feeds.4Sysops

International law enforcement dismantles Kratos phishing-as-a

Feeds.4Sysops •IT News • July 21, 2026

German authorities, supported by U.S. and Indonesian law enforcement, have successfully dismantled the infrastructure behind the Kratos phishing-as-a-service (PhaaS) kit. The operation resulted in the arrest of the alleged developer and technical administrator in Indonesia and the seizure of over 200 servers. This takedown marks a significant disruption to a platform that had become a major tool for low-skill cybercriminals. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Global Takedown of Kratos Phishing-as-a-Service Infrastructure On July 20, 2026, German and U.S. authorities dismantled the Kratos phishing-as-a-service (PhaaS) platform, arresting its developer in Indonesia. The operation neutralized over 200 servers and disrupted approximately 15,000 phishing campaigns monthly, affecting hundreds of thousands of victims across more than 30 countries, primarily in Europe and the U.S. Kratos allowed low-skill cybercriminals to create convincing Microsoft-themed phishing pages, facilitating credential theft and further crimes. The platform generated over €300,000 since 2024, with around 1,800 criminal affiliates utilizing the service. The takedown marks a significant achievement in combating sophisticated phishing infrastructures. 10 sources 76

Extracted Entities

International law enforcement dismantles Kratos phishing-as-a

The full story

Extracted Entities

Attack Types (1)

Countries (1)

MITRE ATT&CK (1)

Platforms (1)