Top 10 Phishing Kits Used by Cybercriminals

medsocradar_blogPublished 2026-08-11

<h1>Top 10 Phishing Kits Used by Cybercriminals</h1> <p>Phishing kits have turned credential theft into a scalable service by packaging fake login pages, hosting, traffic filtering, victim management, and technical support into ready-made platforms. Advanced services such as <strong>Tycoon2FA, EvilProxy, and Sneaky 2FA</strong> can also intercept session cookies and bypass MFA methods that are not

MITRE ATT&CK techniques

SharepointT1213.002
IP AddressesT1590.005
Password ManagersT1555.005
Cloud AccountsT1586.003
Cloud ServicesT1021.007
Cloud AccountT1087.004
Cloud AccountsT1585.003
Cloud AccountT1136.003
CredentialsT1589.001
ImpersonationT1684.001
Cloud AccountsT1078.004
Messaging ApplicationsT1213.005
ImpersonationAML.T0073

Indicators of compromise

https://blog.barracuda.com/2025/03/19/threat-spotlight-phishing-as-a-service-fast-evolving-threaturl
https://blog.lastpass.com/posts/possible-cryptochameleon-social-engineering-campaign-targeting-lastpass-customers-and-moreurl
https://www.group-ib.com/blog/mea-shipment-tracking-scam/url
mypasskey.infodomain
passkeysetup.comdomain
booking.comdomain

Original source: https://socradar.io/blog/top-phishing-kits-cybercriminals/