ThreatVectr
Tag

#phishing-as-a-service

6 stories taggedphishing-as-a-service.

Illustration: a dimly lit modern conference room with a large wall-mounted video conferencing screen displaying an abstract
Identity & Access

EvilTokens: the phishing kit that turned a smart-TV login trick into a mass account raid

Microsoft says a subscription phishing service broke into more than 12,000 mailboxes by abusing the sign-in flow built for printers and conference room screens.

4 min read
A phishing email interface displayed alongside a legitimate business document template, showing how subtle spoofing tricks bypass security filters and multi-fac
Identity & Access

NovaCookies Phishing Kit Rents Microsoft 365 Session Theft for $320 a Month

A new subscription phishing service abuses genuine Docusign emails to slip past multi-factor authentication and steal live Microsoft 365 logins.

3 min read
A smartphone with a disabled lock screen, next to a computer showing a subscription payment interface for a phishing kit, with a voice call animation suggesting
Threat Intelligence

AnonyMousKIT: the phishing kit that turns stolen iPhones back into cash

A subscription service is helping thieves trick iPhone owners into handing over the codes needed to disable device locks, with AI-powered phone calls doing much of the work.

4 min read
A Microsoft 365 login interface on a computer screen with a two-factor authentication prompt, surrounded by other office windows and applications, representing
Identity & Access

Mirage2FA Phishing Kit Slipped Past Microsoft 365 Logins at 4,500 Firms

A rented phishing service quietly harvested Microsoft 365 credentials and two-factor codes across US and European companies for nearly two years.

4 min read
Illustration: a darkened server room with rows of rack servers, red status lights dimmed
Threat Intelligence

German and US police pull the plug on Kratos, a phishing kit rented to 1,800 crooks

Investigators seized more than 200 servers and arrested the developer in Indonesia, ending a service that ran roughly 15,000 fake Microsoft login campaigns every month.

3 min read
Illustration: an anonymous office desk at dusk, a laptop screen glowing with an out-of-focus generic corporate sign-in page
Identity & Access

Forg365: the new phishing kit built to hoover up Microsoft 365 logins

A fresh phishing-as-a-service operation uses AI to write the bait and a browser extension to keep the door open long after the theft.

4 min read
© 2026 Threat Vectr