Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
4 results for “PhaaS”
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The Greatness PhaaS toolkit added device code phishing capabilities to exploit OAuth 2.0’s Device Authorization Grant and bypass MFA, enabling credential theft and account takeover.
Aug 4, 2026
Police dismantle Kratos phishing platform, arrest developer
Law enforcement agencies in Germany and the U.S. disrupted the Kratos phishing-as-a-service platform’s core infrastructure, and its developer was arrested in Indonesia — marking a rare cross-jurisdictional takedown of a PhaaS operation.
Jul 22, 2026
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new PhaaS operation named Forg365 is selling AI-enhanced phishing tooling via Telegram to attackers targeting Microsoft 365 accounts using device code and AitM session theft.
Jul 13, 2026
ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit
A newly identified phishing-as-a-service platform named ARToken, linked to the EvilTokens operation, reveals an advanced, modular toolkit targeting Microsoft 365 accounts — highlighting evolving adversary infrastructure and detection challenges.
Published Jul 3, 2026 · Analyzed Jul 7, 2026