The Phishing-as-a-Service Economy is Thriving

Researchers at Flare report that commodity phishing kits and Phishing-as-a-Service have industrialized phishing by offering features like reverse-proxy MFA bypass (AiTM), dynamic logo replacement, bot detection, Telegram-based exfiltration, and automated victim tracking, enabling low-skill actors to run sophisticated campaigns at scale; they recommend evolving security awareness to include training on AiTM, BitB, QR-code phishing, skepticism of unusual MFA prompts, and use of password managers, with KnowBe4 highlighted as a training resource.