22 Jul Security Alert: The Kratos Kit Is Down — but the MFA-Bypass Technique It Sold to 1,800 Criminals Is Not
German and US police dismantled Kratos, a phishing-as-a-service kit that stole live Microsoft 365 sessions to walk straight past MFA. The takedown is good news; the adversary-in-the-middle technique it franchised to 1,800 customers is now standard, and a password reset alone does not fix it....