#FlowerStorm
🌸Flowerstorm King Danaan🌸
My Fairie King Flowerstorm from Berserk
📷 scoundrelrun
I love these pics but wearing all of the wings hurt so bad I threw them into a dumpster on the way back home 💀
June 28, 2026 at 4:27 PM
August 24, 2025 at 12:33 PM
FlowerStorm “Phishing-as-a-Service” Attacking Microsoft Users With Fake Login Pages
FlowerStorm “Phishing-as-a-Service" Attacking Microsoft Users With Fake Login Pages
cybersecuritynews.com
January 20, 2025 at 5:33 AM
Device code phishing is exploding, and AiTM actors are getting in on it.

We found ODx phishing-as-a-service providing device code capabilities in addition to their AiTM offerings. ODx is one of the most popular AiTM kits currently. It's also tracked as Storm-1167 and FlowerStorm.
May 4, 2026 at 8:56 PM
A new Microsoft 365 phishing-as-a-service platform called " #FlowerStorm " is growing in popularity, filling the void left behind by the sudden shutdown of the #Rockstar2FA cybercrime service. #cybercrime #CyberSecurity www.bleepingcomputer.com/news/securit...
New FlowerStorm Microsoft phishing service fills void left by Rockstar2FA
A new Microsoft 365 phishing-as-a-service platform called "FlowerStorm" is growing in popularity, filling the void left behind by the sudden shutdown of the Rockstar2FA cybercrime service.
www.bleepingcomputer.com
December 22, 2024 at 7:16 AM
Sophos researchers analyse the FlowerStorm phishing-as-a-service provider, the use of which surged following the disappearance of Rockstar2FA. FlowerStorm shares a number of features with Rockstar and with Tycoon, another Telegram bot-powered PaaS platform. news.sophos.com/en-us/2024/1...
January 16, 2025 at 10:42 AM
-Americans lost $388m to crypto ATMs
-FlowerStorm PhaaS adds VM-based obfuscation
-APT37 poses as the police
-Twill Typhoon's FDMTP backdoor
-New TencShell attacks
-Sandworm and Leek Likho activity still going
-UK sanctions Russian disinfo firms
-Malware reports on Gremlin Stealer, Vidar, XWorm
May 18, 2026 at 7:37 AM
Just put out this research on MiTM PaaS kits labeled Rockstar and Flowerstorm over the past few months. While my name is on this I partnered with two researchers, Josh Rawles and Jordon Olness who did a bulk of the work alongside @thepacketrat.net, and Colin Cowie who are all individually brilliant!
Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces
A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar
news.sophos.com
December 19, 2024 at 4:17 PM
FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages gbhackers.com/flowerstorm-...
FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages
Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms. Phishing campaigns are delivered
gbhackers.com
January 19, 2025 at 3:20 PM
Hot out of a Sophos MDR threat hunt, here's an analysis of two very similar phishing-as-a-service platforms with adversary-in-the-middle code to grab two-factor authentication tokens. news.sophos.com/en-us/2024/1...
Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces
A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar
news.sophos.com
December 19, 2024 at 4:24 PM
Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service
Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service
Rockstar2FA disruption on November 11 spurred FlowerStorm phishing surge, targeting 10 countries and service sectors.
thehackernews.com
December 24, 2024 at 7:12 AM
🚨 MFA under siege: AitM phishing on the rise

Phishing-as-a-Service kits like Tycoon 2FA, Storm-1167 & FlowerStorm are scaling Adversary-in-the-Middle attacks to bypass MFA on Microsoft 365 and Google accounts. They intercept session cookies in real-time letting attackers hijack accounts stealthily.
June 13, 2025 at 11:37 AM
By me @forbes.com: RIP Rockstar, oh look here's another 2FA bypass kit, FlowerStorm. Or is it? Another great technical analysis from the @sophosxops.bsky.social peeps.

#infosec

www.forbes.com/sites/daveyw...
Google And Microsoft Users Warned As New 2FA Bypass Attacks Reported
Has the Rockstar 2FA bypass attack morphed into something worse? What Google and Microsoft users need to know and do.
www.forbes.com
December 23, 2024 at 3:44 PM
Rockstar2FA, a PhaaS toolkit, went down Nov 11, 2024. FlowerStorm, a similar service targeting US/Canada/UK/Australia service industries, saw a surge in activity. Possible connection between the two.#Rockstar2FADown
December 23, 2024 at 12:02 PM
I mean, this art...Miura's legacy...It's astounding.
November 23, 2025 at 11:59 PM
KrakVM + FlowerStorm = low-skill phishing with VM obfuscation. Expect copycats.
FlowerStorm unleashes the KrakVM: PhaaS operators turn to VM-based obfuscation · Blog · Sublime Security
Sublime Threat Intelligence and Research (STIR) identified a phishing campaign using a recently published open-source Javascript virtual machine and obfuscation tool called KrakVM.
sublime.security
May 20, 2026 at 4:59 AM
Current song for writing:
www.youtube.com/watch?v=-Bwc...
Flowerstorm
YouTube video by ARAMITAMA - Topic
www.youtube.com
December 16, 2024 at 7:40 PM
-CISA tells agencies to secure their clouds
-CISA tells HVTs to secure mobile devices
-Congress passes NDAA with cyber provisions
-US seeks extradition of LockBit developer from Israel
-Rockstar 2FA goes down, FlowerStorm emerges in its place
-Malicious VSCode extensions spotted on official store
December 20, 2024 at 10:43 AM
Mail day. For those that don't play Vanguard- just some shiny budget options for favorite decks since the EN market is rampant with buyouts right now

Honestly think that the Eerie Fixer cycle is worth the investment since the EB Cyclers and Pride Cyclers are likely hitting $30+ for all of them soon
February 7, 2025 at 9:56 PM
Joining the Faerie Queen's retinue is our favorite untameable shrew here to help you become ungovernable! Untamed is a chaotic flowerstorm with bitter center, sharp-tongued and sparkly-eyes.

https://www.fridaytea.com/products/untamed
Untamed
This blend is available 9/1-12/3 in our Autumn fandom rotation! I see a woman may be made a fool, if she had not a spirit to resist! Become ungovernable! A chaotic flowerstorm with bitter center, s...
www.fridaytea.com
August 14, 2023 at 5:23 PM
TFMDNDP: High elf Glamour bard/ Fae warlock. She's our pretty pretty princess. Jasmine, with light spice requested.
Introducing: Untamed! "Chaotic flowerstorm with bitter center, sharp-tongued and sparkly-eyed." www.fridaytea.com/products/unt...
Untamed
This blend is inspired by the works of Shakespeare. Check out the entire delicious collection here! I see a woman may be made a fool, if she had not a spirit to resist! Become ungovernable! A chaotic ...
www.fridaytea.com
September 13, 2024 at 8:57 PM
The fight of wild spirits against competing growth? We've got a tea for that! Untamed is a celebration and a riot in a gardenscape of wind and flowers and weeds. Keep up the scrappy energy!

www.fridaytea.com/products/unt...
Untamed
This blend is available 9/1-12/3 in our Autumn fandom rotation! I see a woman may be made a fool, if she had not a spirit to resist! Become ungovernable! A chaotic flowerstorm with bitter center, s...
www.fridaytea.com
September 13, 2023 at 5:01 AM
One actor, three AiTM kits, zero cracked passwords - stolen session cookies walk right past MFA. https://intel.threadlinqs.com/threat/TL-2026-1593 #ThreatIntel #EvilProxy #FlowerStorm #Kali365
July 21, 2026 at 7:28 PM