Kratos

German and US authorities have taken down the core infrastructure of the Kratos phishing kit, which investigators say powered about 15,000 campaigns a month and stole session cookies to get past two-factor authentication.