safety security
Most Phishing Kits Reused the Same Tricks
A study of 1,300 kits found substantial component reuse—and 21.8 percent used no evasion mechanism at all.
Summary
A study of 1,300 kits found substantial component reuse—and 21.8 percent used no evasion mechanism at all.
Researchers examined phishkits collected from 2020 through 2023, including their code, communication channels and data-exfiltration behavior. They found dynamic redirection and traffic attribution mechanisms, plus frequent use of messaging services to receive stolen data. Yet 284 of 1,300 kits used no evasion, and major components were often similar or identical across samples. The authors argue this predictability could support detection at scale; the preprint does not describe a current named campaign.
Why it matters
A study of 1,300 kits found substantial component reuse—and 21.8 percent used no evasion mechanism at all.
Limits and context
- The authors argue this predictability could support detection at scale; the preprint does not describe a current named campaign.
Key claims
A study of 1,300 kits found substantial component reuse—and 21.8 percent used no evasion mechanism at all.
Qualification: The authors argue this predictability could support detection at scale; the preprint does not describe a current named campaign.
Evidence: source-2026-08-10-008
Sources
- arXiv preprint 2608.07451arXiv · primary research
Corrections
No corrections have been recorded for this story.