Bluekit Phishing Kit Streamlines Domains, 2FA Lures, and Session Hijacking

Gbhackers •Mayura Kathir • May 4, 2026

A newly discovered phishing kit called “Bluekit” is reshaping how cybercriminals run phishing campaigns by combining multiple attack stages into a single, centralized platform. Instead, Bluekit integrates these capabilities into one operator panel, streamlining the entire attack lifecycle from setup to data exfiltration. This shift reflects a broader trend toward automation and ease of use […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bluekit Phishing Kit Introduces Advanced Automation and AI Features A new phishing kit named Bluekit has been identified, featuring advanced automation and AI capabilities. It allows cybercriminals to create phishing websites and conduct attacks using over 40 templates, including tools for domain spoofing and voice cloning. The kit centralizes various phishing methods into a single operator panel, streamlining the attack process. Bluekit is still in development, indicating that its features may evolve further. This tool poses a significant threat to organizations as it simplifies the execution of phishing attacks. The kit's automated domain registration feature enhances its effectiveness, making it easier for attackers to deploy their campaigns. Security experts are warning that the proliferation of such kits could lead to an increase in successful phishing incidents. Organizations should be vigilant and enhance their security measures to counteract these evolving threats. 4 sources 58

Extracted Entities

Bluekit Phishing Kit Streamlines Domains, 2FA Lures, and Session Hijacking

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)