Phishing Kits is a tool tracked across 11 threat clusters and 12 intelligence report mentions on ThreatCluster. First observed November 24, 2025; most recent activity June 23, 2026.
Phishing kits are ready-to-use toolsets that simplify creating and distributing phishing campaigns, including fake login and payment pages and sometimes voice-based vishing templates. They enable attackers—ranging from mass-market fraud to targeted credential theft—to harvest credentials, payment data, and other sensitive information at scale. These kits lower the barrier to entry and drive rapid deployment of phishing infrastructure, fueling e-commerce and SSO credential theft campaigns.
Cybercriminals are leveraging the no-code app-building platform Bubble to create and host malicious web applications that target Microsoft accounts. These phishing campaigns utilize legitimate Bubble-hosted URLs, which…
Abdellah Belmili, a 26-year-old Algerian man known as 'SPOX', was extradited from Spain to the U.S. and charged with conspiracy to commit bank fraud. He allegedly operated two cybercrime marketplaces, market0day.com and…
Refund fraud has evolved into a structured underground marketplace where techniques are sold as digital products. Researchers from Flare have identified a thriving ecosystem where fraudsters advertise refund methods,…
A study by Semperis reveals that 52% of ransomware attacks target organizations during holidays and weekends, exploiting reduced cybersecurity staffing. The report surveyed 1,500 IT and security professionals across ten…
Spanish police, in collaboration with German authorities, arrested the alleged administrator of CrimeNetwork, a dark web platform with over 100,000 registered users. The platform facilitated the trade of illicit goods…
The ShinyHunters extortion gang has claimed responsibility for a series of voice phishing attacks targeting single sign-on (SSO) accounts at major platforms including Okta, Microsoft, and Google. In these attacks,…
Over 2,000 fraudulent shopping websites impersonating major brands like Amazon were detected before Cyber Monday and Black Friday. These sites were created using phishing kits, making them appear legitimate to…
In 2025, Russian hackers initiated a phishing campaign that involved creating over 4,300 fake travel websites to steal payment data from hotel guests. The campaign, which began in February, utilized sophisticated…
Custom-made vishing kits are being used by hackers to attack Single Sign-On (SSO) accounts globally. These kits enable attackers to bypass multi-factor authentication (MFA) in real time by profiling victims and using…
Criminals are increasingly utilizing custom voice-phishing kits available on dark web forums to conduct social engineering scams and identity fraud. These kits target accounts from major platforms like Google,…