Cybercriminals Are Scaling Phishing Attacks with Ready-Made Kits

Phishing kits soared in popularity last year as rookie hackers ramped up DIY cyber attacks

As PhaaS kits increase in sophistication, organizations should be on the alert

Cybercriminals are scaling phishing attacks with ready-made kits

Phishing-as-a-Service (PhaaS) kits lower the barrier to entry, enabling less-skilled attackers to run large-scale, targeted phishing campaigns that impersonate legitimate services and institutions, according to Barracuda Networks. Phishing kits grow more sophisticated and scalable Barracuda threat analysts found that in 2025 the most common phishing themes were designed to trick users into clicking links, scanning QR codes, opening attachments, …

Number of phishing attacks doubles in one year

Phishing kits doubled in 2025, with 90% of attacks via phishing-as-a-service. AI makes phishing more realistic and harder to detect.

Phishing-as-a-service kits doubled in 2025 as tactics evolve

In 2025, the number of known phishing-as-a-service (PhaaS) kits doubled in number, increasing the pressure on security teams trying to defend against this ever-evolving threat. A new report from Barracuda shows new players such as Whisper 2FA and GhostFrame introduced inventive and evasive tools and tactics, including a suite of techniques to prevent analysis of their malicious code, while established groups such as Mamba and Tycoon also continu…

Barracuda report finds phishing kits doubled in 2025 as attacks grew more evasive

A new report out today from Barracuda Networks Inc. has detailed how phishing attacks grew more sophisticated and harder to detect in 2025 thanks to the rapid evolution of phishing-as-a-service kits that are increasingly incorporating multifactor authentication bypass, artificial intelligence-generated content and advanced evasion techniques. According to Barracuda’s “Threat Spotlight: How phishing kits evolved in […] The post Barracuda report f…