NEW ADVANCED PHISHING KITS USE AI AND MFA BYPASS TACTICS TO STEAL CREDENTIALS AT SCALE

Summary from the TLDR InfoSec newsletter

Four new phishing-as-a-service kits have emerged: BlackForce ($200-300, MFA bypass via Man-in-the-Browser attacks), GhostFrame (iframe-based evasion with 1M+ attacks), InboxPrime AI ($1,000 perpetual license with AI-generated emails mimicking Gmail behavior), and Spiderman (targeting European banks via Signal with OTP/PhotoTAN interception). These kits feature anti-analysis techniques, real-time credential exfiltration to Telegram, and spintax-based email variation to bypass signature detection. Organizations should implement phishing-resistant MFA, such as FIDO2, and monitor for the emerging Salty-Tycoon hybrid, which combines multiple kit techniques to evade detection rules.