DEBULL: Phishing-as-a-Service Platform for Device Code Attacks
July 7, 2026
DEBULL is a reusable tooling layer that packages Storm-2372-style identity tradecraft into a PhaaS platform. It provides campaign-facing and operator-facing infrastructure, using GraphSpy or GraphSpy-derived code for post-authentication exploitation of Microsoft 365 and Entra environments.