New Bluekit Phishing Kit Introduces AI Assistant, Enhancing Cyber Threats
A newly discovered phishing kit, named Bluekit, has been reported to offer a wide array of capabilities, including an AI assistant and automated domain registration, according to Varonis. The kit is advertised as providing over 40 website templates and features such as two-factor authentication support, geolocation emulation, and voice cloning. It targets various services including email, cloud, and social media platforms like Apple ID, iCloud, and Gmail. Varonis gained access to Bluekit's control panel, revealing a dashboard for domain creation, logs, and campaign support. The phishing kit uses Telegram for data exfiltration and allows operators to manage phishing pages and logs from a single interface. Despite its advanced features, Bluekit is still in development and has not been used in live campaigns yet.