AI-powered phishing kit Bluekit offers centralized attacks on 40+ brands
Researchers uncovered Bluekit, an AI-powered phishing kit that centralizes and automates credential theft attacks targeting over 40 global brands including email providers, cloud services, and developer platforms. The kit integrates features like automated domain registration, 2FA bypass support, voice cloning, and AI assistance into a single operator dashboard.
What happened
Varonis Threat Labs researchers discovered Bluekit, an AI-powered phishing kit marketed as a software-as-a-service platform for conducting centralized and automated phishing campaigns.
The kit advertises 40+ website templates covering email and cloud accounts, developer platforms, social media, retail, and crypto services including iCloud, Apple ID, Gmail, Outlook, GitHub, Twitter, Zoho, and Ledger, along with features for automated domain purchase and registration, 2FA support, spoofing, geolocation emulation, antibot cloaking, and an AI assistant with voice cloning capabilities.
Index analysis
Bluekit consolidates phishing operations previously requiring separate services for credential harvesting, domain rotation, and SMS gateways into a single operator dashboard with centralized site creation, domain setup, captured logs, and campaign support features.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.