Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
23 IOCs
Kratos PhaaS Targets US and EU: How to Reduce Microsoft 365 Account Takeover Risk
Malware Families
Excerpt
Kratos is a mature Phishing-as-a-Service operation targeting Microsoft 365 users across the US, Europe, and other regions. By combining trusted platforms, anti-bot checks, and convincing login pages, ithelps attackers steal credentials while delaying detection and response. For security leaders, that increases the risk of account takeover, fraud, data exposure, and higher incident response costs. ANY.RUN researchers traced three generations of the kit, uncovered 1,484…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability(2)
Victim
Attack Flow6 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →23 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | c447e75f1029ed7a5882add16bcd13ad44be3bd47c93c830ff39185e23d25ebb | Medium | Score 53/100 | First seen |
| Domain | espaciocf.de | High | Score 58/100 | First seen |
| Domain | aspireglobal.ltd | High | Score 58/100 | First seen |
| SHA256 | a3c298ccf2456989ceb080e661b01c3b00445902ae7bb3e58dad4d846334ff9c | Medium | Score 53/100 | First seen |
| Domain | rundwasser.de | High | Score 58/100 | First seen |
| Domain | dufllot.sbs | High | Score 58/100 | First seen |
| Domain | ihrsupportcenter.de | High | Score 58/100 | First seen |
| Domain | jumpast.es | High | Score 58/100 | First seen |
| Domain | aabiz.de | High | Score 58/100 | First seen |
| Domain | ilersls.org | High | Score 58/100 | First seen |
| SHA256 | 9d1a1a5e3b5e5de8a6c76ded7a01fa01709d426232b0048c9ee6ba0c5c1b8b42 | Medium | Score 53/100 | First seen |
| SHA256 | 949895df17148c5ea29f190d2619a14b3ec648425b9cc3c5a1423553c16f3898 | Medium | Score 53/100 | First seen |
| SHA256 | cd231b895bbcd7154b81df1e065bf02f1ec667b920c8b6d23308cd509833b5ea | Medium | Score 53/100 | First seen |
| Domain | enerdizerandtron.de | High | Score 58/100 | First seen |
| Domain | razen.online | High | Score 58/100 | First seen |
| Domain | aaalen.de | High | Score 58/100 | First seen |
| Domain | starwellmedia.com | High | Score 58/100 | First seen |
| Domain | buenne.de | High | Score 58/100 | First seen |
| Domain | trisrnareprjdocz.com | High | Score 58/100 | First seen |
| Domain | theoceanac.online | High | Score 58/100 | First seen |
| Domain | smartcontrolengineer.com | High | Score 58/100 | First seen |
| Domain | sonnenbrillenspot.de | High | Score 58/100 | First seen |
| Domain | abal.my | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…