Threat actorIndonesiaTracked since 2026-07

Kratos PhaaS operator

Also known as:Kratos

As of 2026-07-22, Kratos PhaaS operator is a Indonesia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning phishing. Also known as Kratos.

Tracked threats: 11 high
First seen: 2026-072026-07-22
Last seen: 2026-072026-07-22
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: IndonesiaNation or origin

Nation: Indonesia · 1 tracked threat(s) · Categories: PHISHING

Activity timeline

Kratos PhaaS operator appears in 1 tracked threat between 2026-07-22 and 2026-07-22.

Tracked threats

German-US-Indonesian Law Enforcement Dismantle Kratos (aka SneakyLog / Sneaky 2FA) Phishing-as-a-Service Kit Targeting Microsoft 365 Sessions and MFAHIGH2026-07-22