Athena StealthRoute PhaaS uses AI to write and cloak phishing lures
Abnormal AI counted about 89,700 related messages at roughly 2,280 US and European organizations through October 9.
1
Stories per day · 30 days
4 RSS
Relatedphishing6microsoft4credential-theft3storm-29903storm-31193iron-man2iron-man-system2resecurity2yam-store2abnormal-ai1athena-stealthroute1china1cogui1credential-harvesting1haozi1initial-access1link-cloaking1phishing-kit1
15 stories, newest first · one card per story
Stories tagged #phaas
Chinese Phishing Network Linked to 1 Billion Messages Targeting 75,000 Organizations
Resecurity says a Chinese phishing-as-a-service kit, Iron Man System, offered thousands of lures and a claimed billion messages.
Iron Man Phishing-as-a-Service Kit Impersonates Banks, Couriers and Government Agencies Worldwide
Iron Man phishing-as-a-service impersonates banks and agencies; Microsoft tracks its developers as Storm-2990.
Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
Microsoft and partners disrupted Yam Store, a phishing service behind over one billion messages since January 2026.
As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages
Microsoft dismantled YAM Store, a phishing marketplace tied to more than one billion malicious messages.
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and partners disrupted three phishing kits linked to over one billion scam messages worldwide.
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
Malwarebytes says BlueKit PhaaS lets criminals launch brand-phishing sites and steal sessions in about ten minutes.
Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA
Group-IB says the Milk Dragon kit relays OTPs live to steal shoppers' card payments across 66 countries.
Phishing Risk Across 5 Key US Industries: ANY.RUN Data & Mitigation Strategies
ANY.RUN reports phishing exposure above 70% in US finance and manufacturing, driven by AiTM kits like Sneaky2FA and ClickFix social engineering.
Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud
Court-ordered seizure of 50 EvilTokens websites disables an AI-driven PhaaS tied to 12,000 compromised Microsoft inboxes and $1.7M reported losses.
3
BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA
CloudSEK uncovered BigBear 2.0, a PhaaS operation that captured 4,148 Microsoft 365 session cookies, hijacking authenticated sessions after MFA via AiTM proxy.
BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials
CloudSEK researchers found the BigBear 2.0 PhaaS kit, built on Evilginx2, has stolen over 5,100 Microsoft 365 credentials across 461 organizations in 40+ countries.
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies AitM phishing kit, a Sneaky 2FA variant, uses genuine Docusign lures to steal Microsoft 365 sessions at hundreds of organizations.
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
SOCRadar details AnonyMousKIT, a phishing-as-a-service platform using AI voice agents posing as Apple Support to steal passcodes and 2FA codes.
5
The Smishing Deluge: China-Based Campaign Flooding Global Text Messages
Unit 42 attributes a global smishing campaign with 194,000+ phishing domains impersonating tolls, banks, and couriers to the Smishing Triad.
3