Bluekit phishing kit enables automated phishing with 40+ templates and AI tools


Bluekit phishing kit enables automated phishing with 40+ templates and AI tools

Pierluigi Paganini
May 04, 2026

Bluekit is a new phishing kit with AI features, automated domain setup, and tools like spoofing, voice cloning, and 40+ attack templates.

Bluekit is a newly discovered phishing kit still in development that includes advanced features such as an AI assistant and automated domain registration. According to Varonis, it offers over 40 website templates along with tools for spoofing, voice cloning, antibot protection, geolocation tricks, and two-factor authentication bypass support.

Varonis Threat Labs recently discovered Bluekit, a new phishing kit pitching a broader model. It advertises 40+ website templates, automated domain purchase and registration, 2FA support, spoofing, geolocation emulation, Telegram and browser notifications, antibot cloaking, and add-ons like an AI assistant, voice cloning, and a mail sender.” reads the report published by Varonis.

Bluekit supports multiple phishing templates targeting major services such as iCloud, Apple ID, Gmail, Outlook, Yahoo, ProtonMail, GitHub, Twitter, Zoho, Zara, and Ledger. It combines email, cloud, crypto, and developer platforms in one kit.

The researchers accessed Bluekit to analyze its internal dashboard, which centralizes phishing operations in a single interface. Operators can create campaigns, register or link domains, manage captured credentials, and send stolen data via Telegram.

The kit also includes a site-builder where users select domains, templates, and target brands. It provides detailed control over phishing pages, including login detection, redirects, anti-analysis checks, spoofing, and device filtering.

Bluekit tracks sessions in real time, storing cookies and login data, and displays post-login activity. Overall, it acts as a full phishing platform rather than a simple credential-stealing tool.

Bluekit includes an AI Assistant panel with multiple model options such as Llama (default), GPT-4.1, Claude Sonnet 4, Gemini, and DeepSeek variants.

The researcher noted that in testing, only the default Llama model was usable, while the others appeared but required extra configuration, suggesting possible use of jailbroken or non-standard setups if activated in practice.

The researchers tested the assistant with a phishing scenario targeting a Microsoft 365 MFA reset for a company executive, including QR-based lures and credential-harvesting pages.

Instead of producing a ready-made phishing campaign, the AI generated only a structured draft. The output relied heavily on placeholders and generic text, requiring manual refinement.

“We expected something closer to a polished phishing copilot: a finished lure, cleaner email copy, and perhaps even a workable QR-driven flow with less manual effort. What we received was much more limited.” continues the report. “The assistant returned a structured campaign draft, and much of it relied on placeholders instead of content that looked ready to use as-is.”

Overall, the AI Assistant acts more as a tool for building campaign outlines rather than delivering fully functional phishing kits.

Bluekit has been monitored over time not just for isolated campaigns, but for how quickly it evolves. Researchers initially aimed to catch it in real-world phishing activity, but its rapid development made the release cycle itself part of the observation. New features and templates were added so frequently that tracking updates became as important as identifying active deployments.

“Compared with similar phishing kits that have already advanced further into automation and operator convenience, Bluekit still appears to be a kit in active development.” concludes the report. “The feature set keeps evolving as we track it, and if that pace continues with broader adoption, Bluekit is likely to surface in future campaigns.”

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Bluekit phishing kit)







Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Pool maintenance has long existed in a fragmented state, where different tools solve different problems but rarely work together in a meaningful way. Cleaning the floor, clearing the surface, and maintaining water quality have traditionally required separate interventions, often at different times. What has been missing is a system that not only automates these tasks but also connects them through intelligence.

The Aiper Experts Duo introduces that shift by combining two purpose-built robots, the Scuba V3 and the EcoSurfer S2, into a single, coordinated ecosystem. Instead of operating in isolation, these devices function as a unified system that covers every layer of the pool, from the floor and walls to the waterline and surface.

At the center of this system is Cognitive AI

This moves beyond pre-programmed cleaning cycles and into continuous optimization. The technology works as an adaptive loop that enables the robots to interpret their surroundings, make decisions in real time, and refine their behavior based on past performance. By factoring in variables such as pool size, weather conditions, and cleaning history, the system evolves with use, delivering a level of precision that static automation cannot match. Within the Aiper Experts Duo, these AI-driven capabilities are associated with the Scuba V3, where features such as adaptive cleaning modes, real-time debris detection, and intelligent path planning support navigation and cleaning across the pool’s floor, walls, and waterline.

This intelligence becomes most apparent in how the system manages time and consistency. The EcoSurfer S2 operates using SolarSeeker™ technology, allowing it to maintain surface cleaning throughout the day while intelligently seeking sunlight to sustain its energy levels. At the same time, the Scuba V3 uses AI Navium™ Mode to generate weekly cleaning plans automatically, removing the need for manual scheduling and ensuring the pool remains consistently maintained.

Performance is not just about automation but about efficiency

The Scuba V3’s AI Patrol Cleaning identifies visible debris in real time and adjusts its route accordingly, delivering up to 10× faster cleaning compared to traditional cleaners that rely on standard S-shape floor patterns.  By responding dynamically to what it detects, the system ensures that cleaning is both targeted and time-efficient. This is supported by VisionPath™ technology, which integrates AI vision with advanced sensors to map efficient paths, reduce overlap, and navigate obstacles without unnecessary repetition.

This is supported by VisionPath, which combines an initial AI-led cleaning phase that focuses on visible debris with a structured grid-pattern cleaning of the entire pool floor. The result is a balanced approach that brings together speed and consistency, ensuring that immediate cleaning needs are addressed while still delivering complete and reliable coverage.

The system’s effectiveness also comes from its ability to deliver complete coverage without compromise. While the Scuba V3 handles deep cleaning across the pool’s structure, the EcoSurfer S2 maintains the surface and supports water quality through its adjustable chlorine tablet chamber. Together, they create a continuous maintenance cycle that addresses both visible debris and underlying water balance. Features such as MicroMesh™ filtration capture even ultra-fine particles, while DebrisGuard™ ensures that collected debris remains contained.

Reliability is built into the design through both engineering and architecture

By distributing tasks across two specialized devices, the system reduces wear and improves long-term durability. Combined with solar-assisted operation and energy-efficient path planning, this approach ensures consistent performance while significantly reducing the need for hands-on maintenance, including frequent charging or manual intervention.

For homeowners increasingly investing in connected, more carefree and reliable living environments, this represents a more complete approach to outdoor automation. The Aiper Experts Duo does not simply reduce the effort required to maintain a pool; it removes the need to think about it altogether, allowing maintenance to happen seamlessly in the background.

To explore the system further, visit the official product page:
https://aiper.store/us/products/aiper-experts-duo

As part of the ongoing spring promotion, customers can access savings of up to 25 percent,  available through April 10. In addition, an extra 5 percent discount is available at checkout using the code AiperExpertsDuoXDT, valid through April 25, making this a timely opportunity to transition to a more intelligent and fully integrated pool care system.



Source link