Bluekit Phishing Kit Combines 40+ Templates With an AI Assistant
Summary
Bluekit combines 40+ phishing templates with campaign management, victim-session monitoring, and an AI assistant. Varonis found the AI-generated drafts were experimental and contained placeholders.
Key points
- Bluekit offers more than 40 templates targeting email, cloud, developer, and cryptocurrency services.
- Its AI assistant supports models including Llama, GPT-4.1, Claude, Gemini, and DeepSeek to draft phishing campaigns.
- Varonis found the generated drafts contained placeholders and needed cleanup, suggesting the feature is experimental.
- The platform combines domain registration, phishing-page setup, and campaign management.
- Operators can configure anti-analysis filters, monitor victim sessions, and exfiltrate captured data through private Telegram channels.
Article Details
- Event Type
- Release of the Bluekit phishing kit, an all-in-one phishing platform with an AI assistant for drafting campaigns.
- Impact
- Bluekit provides operators with more than 40 templates targeting email, cloud, developer, and cryptocurrency services, along with phishing-page configuration, anti-analysis filters, and real-time victim-session monitoring. Stolen data is exfiltrated through private Telegram channels. Varonis reported that the AI-generated drafts were experimental and contained placeholders requiring cleanup.
Products
Apple IDVaronis reviewed templates for iCloud, Apple ID, Gmail, Outlook, Hotmail, Yahoo, ProtonMail, GitHub, Twitter, Zoho, Zara, and Ledger, featuring realistic designs and logos.GitHubphishing kit offering more than 40 realistic templates targeting services like Gmail, Outlook, iCloud, GitHub, and Ledger, and it unifies domain registration, phishing page setup, campaign management, and real-timeGmailBluekit is a new phishing kit offering more than 40 realistic templates targeting services like Gmail, Outlook, iCloud, GitHub, and Ledger, and it unifies domain registration, phishing page setup, campaign management,HotmailAvailable templates can be used to target email accounts (Outlook, Hotmail, Gmail, Yahoo, ProtonMail), cloud services (iCloud), developer platforms (GitHub), and cryptocurrency services (Ledger).iCloudis a new phishing kit offering more than 40 realistic templates targeting services like Gmail, Outlook, iCloud, GitHub, and Ledger, and it unifies domain registration, phishing page setup, campaign management, andLedgerkit offering more than 40 realistic templates targeting services like Gmail, Outlook, iCloud, GitHub, and Ledger, and it unifies domain registration, phishing page setup, campaign management, and real-time victimOutlookBluekit is a new phishing kit offering more than 40 realistic templates targeting services like Gmail, Outlook, iCloud, GitHub, and Ledger, and it unifies domain registration, phishing page setup, campaign management,ProtonmailAvailable templates can be used to target email accounts (Outlook, Hotmail, Gmail, Yahoo, ProtonMail), cloud services (iCloud), developer platforms (GitHub), and cryptocurrency services (Ledger).TwitterVaronis reviewed templates for iCloud, Apple ID, Gmail, Outlook, Hotmail, Yahoo, ProtonMail, GitHub, Twitter, Zoho, Zara, and Ledger, featuring realistic designs and logos.YahooAvailable templates can be used to target email accounts (Outlook, Hotmail, Gmail, Yahoo, ProtonMail), cloud services (iCloud), developer platforms (GitHub), and cryptocurrency services (Ledger).ZaraVaronis reviewed templates for iCloud, Apple ID, Gmail, Outlook, Hotmail, Yahoo, ProtonMail, GitHub, Twitter, Zoho, Zara, and Ledger, featuring realistic designs and logos.ZohoVaronis reviewed templates for iCloud, Apple ID, Gmail, Outlook, Hotmail, Yahoo, ProtonMail, GitHub, Twitter, Zoho, Zara, and Ledger, featuring realistic designs and logos.