• Around 600 threat actors are using Darcula, experts warn
• They have managed to steal more than 800,000 credit card details in less than a year
• Mobile devices are prime targets for phishing nowadays

Darcula, an infamous Phishing-as-a-Service (PhaaS) kit, has helped hundreds of its users steal almost a million credit cards in roughly half a year’s time, cybersecurity researchers have said.

Analysts from NRK, Bayerischer Rundfunk, Le Monde, and Norwegian security firm Mnemonic have been drilling deep into Darcula, which in just seven months between 2023 and 2024 served some 600 operators.