New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks

Varonis Threat Labs identified 'Bluekit', a phishing-as-a-service platform that supplies attackers with over 40 realistic site templates, domain management, and a dashboard to capture credentials, session cookies, and local storage. Bluekit uses an Adversary-in-the-Middle technique to steal session tokens and bypass MFA, streams live browser views to operators, exfiltrates captured data via Telegram, and includes an unsafe AI assistant to help build campaigns; researchers warn it is rapidly evolving with features like voice cloning and anti-bot cloaking.