Threat Intelligence4 min read
Bluekit PhaaS Uses Browser-in-the-Middle to Bypass MFA
Netcraft identifies 70 new Bluekit hostnames as the phishing-as-a-service platform adopts real-time session hijacking that defeats all forms of traditional MFA.
Alex KowalskiJun 27, 2026