New Bluekit phishing service includes an AI assistant, 40 templates

A new phishing-as-a-service platform called Bluekit has emerged, offering over 40 templates targeting popular services like Gmail, Outlook, GitHub, and cryptocurrency platforms. It stands out by integrating an AI Assistant panel supporting models such as GPT-4.1, Claude, Gemini, and DeepSeek to help cybercriminals draft phishing campaigns. The kit consolidates domain registration, phishing page setup, anti-analysis mechanisms, real-time victim session monitoring, and data exfiltration via Telegram into a single dashboard. Varonis analyzed the platform and found the AI feature is still early-stage, generating campaign skeletons rather than finished phishing flows. The kit is under active development and represents the growing trend of all-in-one cybercrime platforms lowering the barrier for less sophisticated attackers.