German, U.S. Authorities Dismantle Kratos Phishing Platform, Arrest Developer

Summary

Authorities in Germany and the U.S. dismantled Kratos, seized more than 200 servers and arrested its developer in Indonesia. BKA says the service supported about 1,800 customers and 15,000 phishing campaigns per month.

Key points

German and U.S. authorities seized more than 200 servers, disrupting Kratos’s phishing-as-a-service infrastructure.
The platform’s developer was arrested in Indonesia.
Kratos let customers create fake Microsoft authentication pages designed to steal email addresses and passwords.
BKA says more than 1,800 customers used the service to run roughly 15,000 phishing campaigns per month.
Authorities report confirmed victims in 35 countries and say seized servers may provide evidence to identify customers.

Article Details

Event Type: Law enforcement operation dismantled the Kratos phishing-as-a-service platform, seized its servers, and arrested its developer.
Impact: Authorities seized more than 200 servers, disrupting the service. BKA says the platform had over 1,800 criminal customers and supported roughly 15,000 phishing campaigns per month; campaigns targeted Microsoft accounts across 35 countries. Authorities say the fake login pages stole email addresses and passwords, enabling account hijacking.