Bluekit Phishing Kit Automates Domains, 2FA Lures, and Session Hijacking in One Panel

This report describes Bluekit, a comprehensive phishing kit that bundles site creation, domain automation, session hijacking, cookie/local-storage dumps, Telegram exfiltration, antibot cloaking, and an AI assistant—enabling attackers to bypass 2FA and manage full phishing campaigns against many major services from a single dashboard.