Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
-
Phishing kits have evolved well beyond simple cloned login pages. Modern kits now embed filtering, session management, and traffic control directly into the infrastructure that serves the phishing content, making them harder to detect and more effective at scale.
ANY.RUN has identified a new phishkit called Wazza, which targets banking, manufacturing, and government organizations across the US, Europe, and Australia.
Key points from the research:
- Wazza functions as a full phishing framework rather than a static page template, incorporating filtering and session handling into the delivery infrastructure.
- Targeted sectors include banking, manufacturing, and government.
- Victims are spread across the US, EU, and Australia.
The shift toward feature-rich phishkits like Wazza means defenders can no longer rely solely on spotting lookalike login pages. Detection efforts need to account for the filtering and traffic-control layers that sit in front of the credential-harvesting page itself.
Source: The Hacker News
Has your organization seen any indicators of Wazza-style phishkits in your environment, and how are you adjusting your detection strategy?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login