It's Phishing Season: An Overview of Phishing Kits

The talk looks at phishing kits and phishing-as-a-service, the packaged tools criminals use to stand up fake sites and run campaigns. The speaker, a financial fraud analyst, points out that providers and authorities often take these sites offline only after victims have already suffered financial harm, and that this activity runs continuously rather than in seasons.

The planned outline covers the typical structure of a phishing kit, how fraudsters increasingly use these kits, real examples seen in the wild, and the evasion methods used to hide activity. The clearer parts of the talk point to practical research resources: checking whether a domain was recently registered, following threat intelligence communities such as AlienVault for reporting on phishing trends, and using the MITRE ATT&CK spearphishing via service entry to document and map these attacks.

The closing Q&A added practical guidance. Anyone receiving a message about a refund or payment should verify it through a separate channel rather than replying to the sender or number. For organizations, password managers should be vetted closely and limited to accounts that really need them. For older or less technical relatives who keep clicking suspicious links, the speaker suggested parental-style controls and ongoing education alongside gentle guidance.