Key Point: International law enforcement has dismantled the phishing platform Kratos and its principal operator.
The Phishing-as-a-Service platform Kratos was shut down through joint investigations by the BKA and FBI. The principal administrator was arrested, all infrastructure has been taken offline.
The German Federal Criminal Police Office (BKA) and the FBI have jointly shut down the Phishing-as-a-Service platform Kratos. The infrastructure has been taken offline, and the principal administrator has been arrested.
For CISOs, this action represents a temporary reduction in one prominent attack infrastructure. Phishing-as-a-Service offerings significantly lower the entry barrier for attackers—professional phishing campaigns are now accessible to actors without deep technical expertise. The takedown demonstrates that such criminal platforms come under the scrutiny of law enforcement, but it does not lead to their fundamental elimination from the threat ecosystem.
In practice, the risk landscape remains unchanged: alternative PaaS offerings exist in parallel, and blocked users migrate to competing services. A comprehensive phishing awareness programme and technical controls (authentication, email filtering, credential guard) remain essential for organizations, regardless of police operations against individual providers.
Source: borncity.com · Published 23 July 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.