Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

ANY.RUN researchers have identified a new phishing kit called Wazza targeting banking, manufacturing, and government organizations across the US, Europe, and Australia. Unlike traditional phishing kits that simply clone login pages, Wazza incorporates advanced capabilities including traffic filtering, session management, and infrastructure-level controls. The kit is designed to evade detection while harvesting credentials from victims in multiple sectors. Its multi-regional targeting scope suggests a well-resourced threat actor or group. The phishing infrastructure includes built-in mechanisms to manage victim sessions and filter out unwanted traffic such as bots or researchers. This represents a broader trend of increasingly sophisticated phishing-as-a-service tooling available to attackers. The targeting of critical sectors like banking and government elevates the potential impact of successful campaigns.