Germany-U.S. Kratos PhaaS takedown and developer arrest
Law Enforcement
Summary
Hide ▲
Show ▼
Authorities in Germany and the U.S. seized more than 200 servers and arrested the developer of Kratos, a global phishing-as-a-service operation, disrupting a large-scale credential-theft service. The takedown cut off a platform that enabled cybercriminal customers to run phishing campaigns against victims across multiple countries.
Related Happenings
Kyle Svara Snapchat account-takeover phishing campaign
Campaign
H score29
First: 24.07.2026 14:17
Last: 24.07.2026 14:17
Sources 1
About this happening:
The Kyle Svara campaign used social engineering to phish Snapchat access codes from a large victim pool, enabling account takeover and the theft of intimate photos. Th...
Kyle Svara Snapchat account-takeover phishing campaign
CampaignAbout this happening: The Kyle Svara campaign used social engineering to phish Snapchat access codes from a large victim pool, enabling account takeover and the theft of intimate photos. Th...
Kratos ecosystem shift changes threat-actor operations
Threat Actor Meta
H score39
First: 22.07.2026 02:07
Last: 22.07.2026 02:07
Sources 1
How related:
“Authorities believe that more than 1,800 criminal customers purchased Kratos and used it to conduct roughly 15,000 phishing campaigns per month,” BKA announced.
About this happening:
The Kratos phishing-as-a-service ecosystem was dismantled after it scaled to more than 1,800 criminal customers, exposing a subscription model that drove roughly 15,000...
Kratos ecosystem shift changes threat-actor operations
Threat Actor MetaHow related: “Authorities believe that more than 1,800 criminal customers purchased Kratos and used it to conduct roughly 15,000 phishing campaigns per month,” BKA announced.
About this happening: The Kratos phishing-as-a-service ecosystem was dismantled after it scaled to more than 1,800 criminal customers, exposing a subscription model that drove roughly 15,000...
CBZC arrests SIM-swapping gang
Law Enforcement
H score33
First: 26.06.2026 01:37
Last: 26.06.2026 01:37
Sources 1
About this happening:
Polish authorities arrested four members of an organized cybercrime group, disrupting a case tied to SIM-swapping attacks and cryptocurrency account takeovers. The...
CBZC arrests SIM-swapping gang
Law EnforcementAbout this happening: Polish authorities arrested four members of an organized cybercrime group, disrupting a case tied to SIM-swapping attacks and cryptocurrency account takeovers. The...
FBI takedown of Outsider Enterprise phishing service
Law Enforcement
H score63
First: 14.06.2026 17:36
Last: 14.06.2026 17:36
Sources 1
About this happening:
The FBI and partners dismantled Outsider Enterprise, a phishing-as-a-service operation tied to thousands of phishing websites and large-scale credential theft....
FBI takedown of Outsider Enterprise phishing service
Law EnforcementAbout this happening: The FBI and partners dismantled Outsider Enterprise, a phishing-as-a-service operation tied to thousands of phishing websites and large-scale credential theft....
Tycoon2FA phishing campaign resumes after takedown
Campaign
H score42
First: 23.03.2026 18:05
Last: 23.03.2026 18:05
Sources 1
About this happening:
Tycoon2FA is a subscription-based phishing-as-a-service campaign that uses adversary-in-the-middle (AiTM) interception to bypass MFA and keep compromising email...
Tycoon2FA phishing campaign resumes after takedown
CampaignAbout this happening: Tycoon2FA is a subscription-based phishing-as-a-service campaign that uses adversary-in-the-middle (AiTM) interception to bypass MFA and keep compromising email...
Timeline
-
22.07.2026 02:07 3 articles · 13d ago
Germany and U.S. authorities dismantle Kratos phishing platform
Legal Policy Action UpdateAuthorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service platform, seized more than 200 servers, and arrested the developer in Indonesia. The action was carried out by Frankfurt’s Prosecutor General Office (ZIT), Germany’s Federal police (BKA), and U.S. law enforcement under Operation Olympus Blade, with domain ownership transferred to the FBI. BKA described Kratos as a widely used criminal phishing service with confirmed victims across 35 countries, more than 1,800 criminal customers, and roughly 15,000 phishing campaigns per month, and said the seizures rendered the service inoperable so the campaigns could no longer continue.
Show sources
- Police dismantle Kratos phishing platform, arrest developer — www.bleepingcomputer.com — 22.07.2026 02:07
- Police dismantle Kratos phishing platform, arrest developer — www.bleepingcomputer.com — 22.07.2026 02:07
- Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA — thehackernews.com — 22.07.2026 09:38