60
Phishing kit sold online now generates fake login pages in real time from any URL
The researchers' screenshots show why "check the design" no longer works.
Bluewall Research documented "MirrorKit," which copies a real login page live, including images, and relays credentials and one-time codes to attackers. It sells for $300 a month.
Read it at the source
Cascadic Analysis 2
Call to ActionSwitch to passkeys where offered
How can you help?
Passkeys are tied to the real site and cannot be relayed through a copied page.
Confidence: High
8
Product SparkBrowser warnings for freshly registered domains
What product does this inspire or accelerate?
Most MirrorKit pages live on domains under a week old. That signal is cheap to surface.
22
Rabbit Holes
-
Passkeys, explained without jargonWhat changes when you log in. · Quiet Signal Review · Swim · 30 min11