Starkiller Phishing Kit Enables MFA Bypass and Identity Theft

Starkiller Phishing Kit Enables MFA Bypass and Identity Theft

First seen 19 Feb 2026, 13:17 UTC •Infosecurity-MagazineItproDigit.FyiDarkreadingFeeds.Feedburner+6 •85% similarity •27.8

Article Content

Browse articles
ThreatCluster

The Starkiller phishing kit has been identified as a new tool that allows cybercriminals to spoof real login pages and bypass multi-factor authentication (MFA). This commercial-grade platform, detailed by researchers at Abnormal, is designed for large-scale identity theft and is available on the dark web. It requires no technical skills to operate, as it includes monthly updates and documentation.

ThreatCluster AI

Timeline

2026-02-19
Starkiller phishing kit publicly detailed by cybersecurity analysts
Date unknown
Starkiller kit made available on the dark web

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Phishing Chrome PhaaS Starkiller