Tool
Bluekit
- First Reported
- May 1, 2026
- Latest Reported
- Jun 25, 2026
Reported Context (3)
- Bluekit phishing-as-a-service has expanded with nearly 70 new hostnames and a browser-in-the-middle approach that uses rrweb to relay legitimate login pages while stealing session tokens. Bluekit Phishing Kit Adds Browser-in-the-Middle Session Theft
- Dubbed Bluekit, it has been advertised as offering over 40 website templates, support for two-factor authentication, geolocation emulation, antibot cloaking, notifications, spoofing capabilities, voice cloning, and a Bluekit Phishing Kit Adds AI Assistant and Automated Domain Setup
- Bluekit is a new phishing kit offering more than 40 realistic templates targeting services like Gmail, Outlook, iCloud, GitHub, and Ledger, and it unifies domain registration, phishing page setup, campaign management, Bluekit Phishing Kit Combines 40+ Templates With an AI Assistant
People (1)
MITRE ATT&CK (1)
Products (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.