FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation
released on 2026-05-18 @ 06:45:10 PM
FlowerStorm is a widely known Phishing-As-A-Service (PhaaS) attack kit that has been active since at least mid-2024, increasingly in large scale campaigns. FlowerStorm performs targeted, complex collection of a victim’s credentials, including the management of multi-factor authentication (MFA).