Kratos Phishing Kit: AiTM Tool for Microsoft 365 Session Theft
July 22, 2026
Kratos is a sophisticated phishing kit dismantled by law enforcement in July 2026. It was designed to steal Microsoft 365 session cookies and bypass MFA using adversary-in-the-middle techniques. The kit operated as a phishing-as-a-service platform with two modes: credential harvesting and live session capture.