Key Data
Netcraft researchers have observed the cybercriminals behind darcula, the phishing-as-a-service (PhaaS) platform, have released a new update to their darcula-suite, accelerating phishing kit creation with AI, confirming the use of AI to more quickly create high-quality, customized phishing kits. We first covered darcula’s platform, which enables widespread and highly targeted smishing attacks, in March 2024 and February 2025. darcula has continued to evolve into a sophisticated, subscription-based ecosystem with tooling and speed that rivals modern tech startups.
As of yesterday morning, April 23rd BST, Netcraft researchers have identified a major enhancement: the darcula-suite toolkit, which allows users to create their own phishing pages, now leverages generative AI capabilities. This addition lowers the technical barrier for creating phishing pages, enabling less tech-savvy criminals to deploy customized scams in minutes. The new AI-assisted features amplify darcula’s threat potential by simplifying the process to build tailored phishing pages with multi-language support and form generation — all without any programming knowledge.
Darcula is one of several communities under the loosely affiliated Smishing-Triad, known for mass-targeting individuals globally via SMS-based phishing (smishing) attacks.
Announcement of AI functionality added to darcula-suite, Google translation reads as: “A major update adds AI functionality, making it easier for customers to get started and create unique source code.”
Darcula: a phishing platform built like a startup
Darcula is not just a phishing platform; it’s a service model designed for scale. Users pay for access to a suite of too
[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.
Read the original article: