Kratos V2 phishing kit static asset request (dsa.svg/sid.gif/imag.jpg)

Duo Tech@duotech

•updated Jul 14, 2026•0•0•3

Detects HTTP GET requests for specific static assets (dsa.svg, sid.gif, imag.jpg) known to be associated with the Kratos V2 phishing kit, which is often used in credential harvesting campaigns.