Bluekit Phishing Kit Adds AI Assistant and Automated Domain Setup
Summary
Varonis reports that Bluekit combines phishing-page management, domain setup and session-data collection, with an AI assistant that produced only a placeholder-filled campaign draft when tested. The kit has not been used in a live campaign.
Key points
- Varonis says it accessed Bluekit’s control panel, which manages domains, phishing pages, delivery, logs and campaigns.
- The kit advertises more than 40 templates and features including two-factor authentication support, geolocation emulation, antibot cloaking and voice cloning.
- Bluekit uses Telegram as its default exfiltration channel, according to Varonis.
- The kit tracks session state and stores cookies and local-storage data, with a live view of logged-in session data.
- In Varonis’s test, the AI assistant generated a structured campaign draft with placeholders, not ready-to-use content.
- Varonis reports that Bluekit is under active development but has not yet been used in a live campaign.
Article Details
- Event Type
- Report on the discovery and capabilities of the Bluekit phishing kit.
- Impact
- Bluekit offers phishing-page templates, credential and session-data capture, cookie and local-storage collection, and Telegram-based exfiltration. Varonis reports that the kit has not yet been used in a live campaign.