Police dismantle Kratos phishing platform, arrest developer

Wed, 22 Jul 2026 12:46:13 +0000

Engineer — Skip
SOC/IR — Learn: The Kratos PhaaS takedown removes active infrastructure but no IOCs or TTPs are published in this item, so there is no immediate detection or hunt to run; useful background on the phishing-as-a-service ecosystem.
Leader — Learn: A major PhaaS platform serving global customers has been dismantled — useful context for threat landscape briefings, but no immediate vendor exposure or regulatory action is required.

Takedown on CuraSec