The advanced persistent threat became the platform.
MFA-bypass kits are now sold online like off-the-shelf software. Arkose Labs COO Frank Teruel traces how crime-as-a-service platforms turned fraud into a subscription business, and how Discord and Telegram supplied the last piece: coordination at scale.
About the speaker
A crime-as-a-service platform says, pick a bank, you're a bank, and someone says, hey, this bank is using an MFA as a silver bullet for identity.
All of a sudden there's phishlets that are MFA compromised, being sold online as a service. For X amount of money, you buy it. The advanced persistent threat became the platform. Crime-as-a-service platforms now democratize fraud for everybody, nation state actors, organized crime, and everybody else.
The minute it became a business, those platforms now have an imperative for continued product market fit. I have to sell you something that works. So they became multi-billion-dollar businesses, and the innovation started to flow.
The last piece that was missing is how do they communicate, Discord, Telegram, the social channels. Now you had everything you needed to do fraud at scale.
A crime-as-a-service platform says, pick a bank — you're a bank, and someone says, hey, this bank is using an MFA as a silver bullet for identity. All of a sudden there's phishlets that are MFA compromised, being sold online as a service. For X amount of money, you buy it, and the advanced persistent threat became the platform. Crime-as-a-service platforms now democratize fraud for everybody — nation state actors, organized crime, and everybody else.
The urgency around that became much easier at scale for bots to do their thing, because now they were being enabled through these crime-as-a-service platforms. The minute it became a business, those platforms had an imperative for continued product-market fit — they had to sell something that works. So they became multi-billion-dollar businesses, and the innovation started to flow. The last piece that was missing was how do they communicate — Discord, Telegram, the social channels. Now you had everything you needed to do fraud at scale, and that's been the big evolution: the acceleration of fraud at scale over the last five years.
Stopping bots, AI agents, and fraud before they reach your users.
