Attacks and malware
What is Phishing kit?
A ready-made package of fake login pages and scripts that lets criminals launch a phishing site quickly, often sold as a service.
A phishing kit is a packaged set of files that copies a brand's login page and sends captured credentials to the operator. Many are now sold as phishing-as-a-service, with hosting, templates for dozens of brands and live dashboards.
Advanced kits proxy the real login page to capture multi-factor codes and session cookies. Because kits are reused across many sites, analysts can cluster campaigns by kit features such as file paths, code comments and exfiltration addresses.