Security News > 2022 > March > Phishing kits constantly evolve to evade security software
Modern phishing kits sold on cybercrime forums as off-the-shelve packages feature multiple, sophisticated detection avoidance and traffic filtering systems to ensure that internet security solutions won't mark them as a threat.
Most of these websites are built using phishing kits that feature brand logos, realistic login pages, and in cases of advanced offerings, dynamic webpages assembled from a set of basic elements.
Threat actors use phishing kits extensively due to the automation they offer, as they typically have to set up hundreds of fake sites each day to replace those detected and blocked the previous day.
First, phishing kits include visitor filtering settings that prevent bots, analysis software, and guests from non-targeted locations from entering.
Kaspersky reports that in 2021, it detected 469 individual phishing kits supporting at least 1.2 million phishing websites.
As the security firm underlines, the number of sophisticated phishing kits that include anti-bot, anti-detection, and geoblocking features constantly increases.