Breach404
Back to Insights
Cybersecurity2 min readJuly 22, 2026

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

Law enforcement has dismantled the Kratos phishing kit, a sophisticated tool designed to steal Microsoft 365 session credentials and circumvent multi-factor authentication protections. Organizations should remain vigilant against phishing campaigns that m

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free