News report

# Nascent SheByte PhaaS platform gains traction, report finds

SC Media, April 18, 2025. SheByte's uptake as the phishing-as-a-service platform filling the gap left by LabHost's April 2024 seizure, including a LiveRAT-style admin panel that blocks VPN, proxy and VM traffic and captures MFA codes in real time..

**Source type:** News report

**Published:** April 18, 2025

**Research grade:** S2

**Used in entries:** 1

## Bibliographic record

**Publisher:** SC Media

**Published:** April 18, 2025

**Source type:** News report

**Research grade:** Source grade S2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.scworld.com/brief/nascent-shebyte-phaas-platform-gains-traction-report-finds](https://www.scworld.com/brief/nascent-shebyte-phaas-platform-gains-traction-report-finds)

**What it supports:** SheByte's uptake as the phishing-as-a-service platform filling the gap left by LabHost's April 2024 seizure, including a LiveRAT-style admin panel that blocks VPN, proxy and VM traffic and captures MFA codes in real time.

**Dataset id:** src\_scmedia\_shebyte\_2025

## Research notes

- By SC Staff. article:published\_time 2025-04-18T09:19:13-04:00.
- Short news brief relaying Fortra's research rather than original reporting; the underlying vendor report is the stronger citation for the LiveRAT derivation claim.
- The brief dates SheByte's foothold to December, after the addition of customisable 'v2' phishing pages.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[SheByte phishing-as-a-service](https://takedownindex.org/takedowns/labhost-phishing-as-a-service-takedown)

Ecosystem successor, LabHost phishing-as-a-service takedown

Later outcome

[All sources](https://takedownindex.org/sources)