DEBULL

Reported Context (2)

Criminal PhaaS kits like EvilTokens (340+ organizations in its first five weeks), Kali365 (which earned an FBI advisory), ARToken, DEBULL, Forg365, and many others all offer the capability. Push Security Argues AI-Powered Phishing Is Outpacing Blocklists
ZeroBEC and Cisco Talos linked the activity to reusable tooling and PhaaS ecosystems including DEBULL, Storm-2372-style tradecraft, EvilTokens, ARToken, and Tycoon 2FA. DEBULL Tooling and Compromised Website Used in Microsoft 365 Device-Code Phishing Campaign

People (2)

Threat Actors (1)

MITRE ATT&CK (4)

Vendors (2)

Products (3)

Tools (10)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.