Threats Tagged 'automated-workflows'

BlueKit is a commercial Phishing-as-a-Service (PhaaS) platform offering a wide range of ready-made phishing kits targeting banks, cloud services, cryptocurrency exchanges, and global brands. It provides subscription-based access with automated account takeover features, peer-to-peer infrastructure for stealth, and integrated anti-detection tools. The platform supports credential harvesting, session hijacking, automated post-compromise workflows such as password resets and passkey enrollment, bulk SMS phishing, and hardware wallet seed phrase harvesting. BlueKit operates via Tor and clearnet domains, accepts cryptocurrency payments, and uses a reseller model for white-label distribution. This lowers the technical barrier for cybercriminals and poses a significant threat to financial institutions, cloud environments, and cryptocurrency users.