The record
Written from the 1 report below. Nothing here is unsourced.
- German and U.S. authorities dismantled Kratos, a phishing-as-a-service platform used by cybercriminals to steal Microsoft credentials, and arrested its developer in Indonesia.
- Investigators seized more than 200 servers, making the service inoperable, and put a seizure banner on its website as part of Operation Olympus Blade.
- The platform, which hosted fake Microsoft login pages, is believed to have been purchased by over 1,800 criminal customers running roughly 15,000 phishing campaigns per month, with victims in 35 countries.
- Its owner reportedly earned at least €300,000 since 2024 through subscription fees.
What to watch next
- Forensic analysis of the seized servers may identify Kratos' 1,800+ criminal customers.
- Further arrests or prosecutions could follow as evidence is retrieved.
- Whether substitute phishing-as-a-service platforms emerge to fill the gap Kratos leaves.
Coverage1
1 report
International1
All filed from United States
Named Germany · United States · Indonesia · Kratos · Microsoft · FBI · Federal police (BKA) · Frankfurt’s Prosecutor General Office (ZIT)
The 1 report is listed beside the record.
Ask this story
Answers cite the reports above, or say they can't.