Navigating the Rise of Starkiller and the Future of Session Hijacking with Frank McKenna

About this episode

Karisse Hendrick interviews Frank McKenna about the rise of Starkiller and the implications of session hijacking in the fraud landscape.

In this episode of Fraudology , host Karisse Hendrick is joined by Frank McKenna , Chief Fraud Strategist at PointPredictive and the mind behind Frank on Fraud . Frank shares his latest deep dive into Starkiller , a sophisticated new phishing-as-a-service (PaaS) platform that emerged following the takedown of Tycoon 2FA. The conversation explores the terrifying mechanics of Attacker-in-the-Middle (AITM) attacks, where fraudsters use "headless browsers" to mirror legitimate login sessions in real-time. Frank provides an inside look at how this tool allows criminals to capture not just credentials, but also two-factor authentication (2FA) codes and session cookies , enabling them to maintain access even after a user logs out. We also explore the "hot topics" dominating the fraud landscape today: ATO Without a Login Event: How marketplaces are seeing "good" users perform legitimate actions, only to have their payout information changed moments later within the same session. The Democratization of Fraud: The professionalization of phishing kits on Telegram, which offer Netflix-style subscriptions and user-friendly dashboards for as little as $300 to $500 a month . Detection…

People in this episode

Host: Karisse Hendrick

Guest: Frank McKenna

Topics covered

• phishing
• session hijacking
• fraud detection
• cybersecurity
• Attacker-in-the-Middle attacks
• marketplace fraud
• democratization of fraud

Keywords

• Starkiller
• session hijacking
• Attacker-in-the-Middle
• phishing
• fraud detection
• two-factor authentication
• marketplace fraud
• cybersecurity tools

Mentioned in this episode

Organizations: PointPredictive

Products: Starkiller, Tycoon 2FA, phishing-as-a-service (PaaS), Netflix-style subscriptions

More episodes of Fraudology Podcast with Karisse Hendrick

• Beyond the Whack-a-Mole: Systemic Change & the War on Fraud Ecosystems · June 9, 2026 · 37 min
• Devious Gift Card Scams, AI Weaknesses in Major Banks, & The Scaled Threat to Community Lenders · June 2, 2026 · 37 min
• The Fall of Crypto ATMs: Bankruptcies, AI Acceleration, and the "Scam Formula" · May 26, 2026 · 47 min
• AI Hallucinations & Mastercard’s New Scam Thresholds · May 19, 2026 · 30 min
• The Strategic Human Firewall: Why Trust is the Greatest Vulnerability in an AI Era · May 12, 2026 · 55 min
• Humans in the Loop: Why AI Can’t Replace Your Fraud Strategy · May 5, 2026 · 42 min