Cybersecurity company MokN raised $15 million [1] in Series A funding this month to develop its Phish-Back platform.
The investment targets a shift in how organizations handle credential theft. By using decoy environments, the company aims to identify when attackers have compromised user accounts before they can penetrate deeper into a network.
The company said the Phish-Back platform works by deploying realistic decoy access points. These decoys are designed to lure attackers into a controlled environment, allowing organizations to detect the use of stolen credentials early in the attack cycle [1]. This proactive approach attempts to flip the script on traditional phishing by creating traps for the adversaries.
The funding round was announced in May 2026 [2]. The $15 million [2] injection will support the technical development and scaling of the decoy infrastructure. By simulating legitimate login portals, the platform provides a mechanism for security teams to realize an intrusion is occurring in real time.
Traditional security measures often focus on preventing the initial phishing email or blocking known malicious IP addresses. MokN's strategy instead assumes that some credentials will inevitably be stolen. The Phish-Back system focuses on the post-compromise phase, the moment an attacker attempts to use those credentials to access a system [1].
This methodology allows security operations centers to gather intelligence on the attacker's methods without risking actual corporate data. The use of these honey-pot style access points serves as an early warning system for broader network breaches.
“MokN raised $15 million in Series A funding this month to develop its Phish-Back platform.”
This investment signals a growing industry trend toward 'active defense' and deception technology. Rather than relying solely on perimeter defense, companies are increasingly investing in tools that assume a breach has already occurred, using decoys to trap attackers and reduce the dwell time of intruders within a network.
