Researchers discover new all-in-one ‘Bluekit’ phishing kit capable of bypassing enterprise 2FA protocols and emulating 40+ global brands
Researchers at Varonis Threat Labs have discovered a sophisticated phishing kit called Bluekit that enables attackers to bypass enterprise two-factor authentication and impersonate over 40 global brands. The kit operates as a phishing-as-a-service platform with an all-in-one dashboard that automates domain registration, site hosting, and data exfiltration. It also features an AI assistant, likely based on jailbroken large language models, to generate convincing phishing emails and support campaign customization.
Opening excerpt (first ~120 words) tap to expand
Pro Security Researchers discover new all-in-one ‘Bluekit’ phishing kit capable of bypassing enterprise 2FA protocols and emulating 40+ global brands News By Benedict Collins published 30 April 2026 Bluekit offers phishing-as-a-service with a twist When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. (Image credit: Image: Generated with Google Gemini) Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Researchers have discovered a complex new phishing kitBluekit offers phishing in a software-as-a-service packageAn entire campaign can be centralized and automated, and assisted by AIBluekit is…
Excerpt limited to ~120 words for fair-use compliance. The full article is at TechRadar.
Discussion
0 commentsMore from TechRadar
