Police Dismantle Kratos Phishing-as-a

Gbhackers •Divya • July 22, 2026

Authorities from Germany, the United States, and Indonesia have dismantled the central infrastructure of Kratos, a major phishing-as-a-service (PhaaS) platform that enabled cybercriminals worldwide to conduct large-scale credential-harvesting campaigns. The operation, announced by Germany’s Federal Criminal Police Office (BKA) and the Frankfurt am Main Public Prosecutor’s Office’s Central Office for Combating Internet Crime (ZIT), resulted […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Global Takedown of Kratos Phishing-as-a-Service Infrastructure On July 20, 2026, German and U.S. authorities dismantled the Kratos phishing-as-a-service (PhaaS) platform, arresting its developer in Indonesia. The operation neutralized over 200 servers and disrupted approximately 15,000 phishing campaigns monthly, affecting hundreds of thousands of victims across more than 30 countries, primarily in Europe and the U.S. Kratos allowed low-skill cybercriminals to create convincing Microsoft-themed phishing pages, facilitating credential theft and further crimes. The platform generated over €300,000 since 2024, with around 1,800 criminal affiliates utilizing the service. The takedown marks a significant achievement in combating sophisticated phishing infrastructures. 10 sources 76

Extracted Entities

Police Dismantle Kratos Phishing-as-a

The full story

Extracted Entities

Attack Types (1)

Countries (3)

MITRE ATT&CK (1)

Platforms (1)