https://temp.sh/XOWUP/STARKILLER_V6.0.1___ULTIMATE_WEAPON__B...
These forums are mostly private, but Krebs certainly has access to them. There can really be no excuse for how he handled this.
There are multiple posts by people in different places claiming to have bought this phishing kit, and then being delivered totally non-functional vibecoded garbage. The vibecoded garbage is not the advertised product though, as the author never managed to get the AI to finish his project.
I figured the forums were real, just was blocked for some reason so thanks.
I do not doubt this story for a second. Its crazy Kerb's is basically freely advertising this blackhat slop.