Kratos is a phishing service built to steal Microsoft 365 credentials at scale. It evolved from the Sneaky2FA kit and gave affiliates ready-made login pages, hosting options, and evasion features that made fraudulent sign-ins harder to detect. The operation relied on phishing emails that led targets through trusted-looking services before showing a fake login page. […]
The post Dismantled Kratos Phishing Kits Acting as Blueprint for Others to Attack Microsoft 365 Users appeared first on Cyber Security News.