Police bust Kratos MFA-bypassing kit

In a rare victory over online fraud, German and US police disrupted the Kratos phishing kit infrastructure. Microsoft 365 users bore the brunt of this popular tool, which specialized in hijacking sessions and bypassing multi-factor authentication. While authorities celebrate taking down this widespread malware, the criminal authors will undoubtedly deploy a new kit by next week. To defend corporate accounts from these persistent threats, teams must adopt phishing-resistant authentication immediately.