Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe

ANY.RUN identified Wazza as a phishing kit targeting banking, manufacturing, and government organizations in the US, Europe, and Australia. The kit uses campaign checks, session tokens, browser telemetry, anti-bot filtering, and redirects before presenting an Adobe-themed Device Code phishing page. The report does not indicate that AI is used in the attack; RealGround analysis therefore classifies this as a low AI-relevance, high-impact malicious cyber threat and recommends readiness assessment and executive advisory for detection, identity protection, and response planning.