PhishingPublished 2 May 2026

New Bluekit Phishing Kit Features AI Assistant

Source SecurityWeek

Description

Still under development, Bluekit provides users with automated domain registration and an AI Assistant. The post New Bluekit Phishing Kit Features AI Assistant appeared first on SecurityWeek .

Impact

If deployed, Bluekit could enable phishing operators to conduct more convincing and automated phishing campaigns targeting a broad range of popular online services. Its advanced features like two-factor authentication support, antibot cloaking, and voice cloning could increase the success rate of credential theft and evade detection mechanisms. The centralized management and automated domain registration simplify campaign setup and operation, potentially increasing phishing attack volume and effectiveness. However, as of the latest information, Bluekit has not been observed in live attacks.

Defensive guidance

Organizations should continue to educate users about phishing risks, implement strong multi-factor authentication methods resistant to phishing, and monitor for suspicious domain registrations and phishing activity. Since Bluekit is still under development and not yet used in the wild, no immediate remediation is required, but vigilance is advised as the kit evolves.

Summary

Bluekit is an emerging phishing kit that integrates an AI assistant and automated domain registration to streamline phishing campaign operations. It offers a wide range of phishing templates targeting popular services including Apple ID, iCloud, GitHub, Gmail, and others. The kit supports advanced features such as two-factor authentication bypass, geolocation emulation, antibot cloaking, spoofing, voice cloning, and detailed session tracking including cookies and local storage data. Operators can manage domains and phishing campaigns from a unified control panel, with Telegram as the default channel for exfiltrating stolen data. While still in active development and not yet deployed in the wild, Bluekit's evolving capabilities indicate potential future use in sophisticated phishing attacks.

References

securityweek.com/new-bluekit-phishing-kit-features-ai-assistant/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 2 May 2026, 10:51 UTC

References

Community reviews