New Phish Kit Warning: Tykit's Evasion Tricks and What Analysts Should Do
A new phishing kit, Tykit, is rapidly spreading, using malicious SVG files to mimic Microsoft 365 login pages and steal corporate credentials. Linked to hundreds of compromised accounts across finance, IT, government, and telecom sectors, it shows how simple code tweaks can outsmart traditional defenses. ANY.RUN experts traced 180+ sandbox sessions revealing the kit's infrastructure and patterns, and how analysts can detect it within minutes where standard scanners see nothing.