Kratos phishing kit dismantled; session cookie theft bypasses MFA

Law enforcement dismantled the Kratos phishing infrastructure, which bypassed MFA by stealing Microsoft 365 session cookies. While the primary operator was arrested in Indonesia and 200 servers were seized, approximately 1,800 customers retain access to the malicious code, posing a persistent threat.