Bluekit Phishing Kit Automates Domains, 2FA Lures, and Session Hijacking in One Panel

Cybersecuritynews •Tushar Subhra Dutta • May 4, 2026

A newly identified phishing kit called Bluekit is changing how cybercriminals carry out phishing attacks by packing multiple attack capabilities into a single, easy-to-use operator panel. Rather than relying on separate tools stitched together from different sources, Bluekit gives attackers one centralized platform to manage everything from fake website creation to session hijacking. For years, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bluekit Phishing Kit Introduces Advanced Automation and AI Features A new phishing kit named Bluekit has been identified, featuring advanced automation and AI capabilities. It allows cybercriminals to create phishing websites and conduct attacks using over 40 templates, including tools for domain spoofing and voice cloning. The kit centralizes various phishing methods into a single operator panel, streamlining the attack process. Bluekit is still in development, indicating that its features may evolve further. This tool poses a significant threat to organizations as it simplifies the execution of phishing attacks. The kit's automated domain registration feature enhances its effectiveness, making it easier for attackers to deploy their campaigns. Security experts are warning that the proliferation of such kits could lead to an increase in successful phishing incidents. Organizations should be vigilant and enhance their security measures to counteract these evolving threats. 4 sources 58

Extracted Entities

Bluekit Phishing Kit Automates Domains, 2FA Lures, and Session Hijacking in One Panel

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)