Spiderman Phishing Kit Targets European Banks with Real-Time Credential Theft

Varonis threat analysts warn about Spiderman, a dangerous new kit that automates attacks against European banks and crypto customers, stealing a victim’s full identity profile.

A new phishing kit, dubbed Spiderman, has been found circulating on the dark web, making it easier than ever to trick customers of major European banks and financial service providers. This is a complete, full-stack phishing kit that allows people with no technical skills to launch broad attacks across multiple countries.

Online threat analysis and data security firm Varonis was the first to report on this threat, detailing how this ready-made program eliminates the need for coding knowledge. Attackers can quickly mimic the login pages of dozens of European financial institutions and even cryptocurrency platforms. Due to its massive scale and reach across five countries, researchers call it “one of the most dangerous” tools they have analysed this year.