© 2026 Hashnode
Executive Summary ARToken is a Phishing-as-a-Service (PhaaS) operator panel published by Cisco Talos on July 1, 2026, which Talos assesses to be an affiliate panel of the EvilTokens platform — the Pha

Executive Summary BlueKit is a Phishing-as-a-Service (PhaaS) platform first documented by Varonis in April 2026, and by late June 2026 Netcraft confirmed it operating at real-world scale, with roughly

Cybersecurity researchers have linked the Phishing-as-a-Service (PhaaS) platforms Lighthouse and Lucid to more than 17,500 phishing domains targeting 316 brands across 74 countries. "Phishing-as-a-Service deployments have risen significantly recently...

Summary In December 2024, researchers identified a new Adversary-in-the-Middle (AiTM) phishing kit named Sneaky 2FA, targeting Microsoft 365 accounts. This kit, active since at least October 2024, is offered as a Phishing-as-a-Service (PhaaS) by the ...
