“Starkiller” Phishing Kit Livestreams Victims' Logins to Hackers

Back Digit.Fyi

“Starkiller” Phishing Kit Livestreams Victims' Logins to Hackers

Digit.Fyi • February 19, 2026

Share: View original

Starkiller can load real brand websites inside attacker‑controlled infrastructure to capture MFA codes and credentials in real time.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Starkiller Phishing Kit Enables MFA Bypass and Identity Theft The Starkiller phishing kit has been identified as a new tool that allows cybercriminals to spoof real login pages and bypass multi-factor authentication (MFA). This commercial-grade platform, detailed by researchers at Abnormal, is designed for large-scale identity theft and is available on the dark web. It requires no technical skills to operate, as it includes monthly updates and documentation. 14 sources 28

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1566 - Phishing

Tools (1)