New Bluekit Phishing Kit Features AI Assistant

A recently discovered phishing kit provides miscreants with a broad range of capabilities, including an AI assistant and automated domain registration, Varonis reports.

Dubbed Bluekit, it has been advertised as offering over 40 website templates, support for two-factor authentication, geolocation emulation, antibot cloaking, notifications, spoofing capabilities, voice cloning, and a mail sender.

According to Varonis, the phishing kit contains templates for email and cloud services, developer platforms, cryptocurrency services, and retail and social media platforms, such as Apple ID, iCloud, GitHub, Gmail, Hotmail, Ledger, ProtonMail, Outlook, Zara, and Zoho.

Varonis says it gained access to Bluekit’s control panel, which revealed access to a dashboard covering domain creation and setup, logs, delivery, and campaign support. The phishing kit uses Telegram as the default exfiltration channel.

“Operators can buy or connect domains from the same interface used to manage phishing pages and captured logs, rather than splitting that work across separate ...