Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

The Wazza phishing kit represents a significant evolution in credential harvesting attacks, using multi-stage routing infrastructure to filter out security scanners and automated traffic before delivering its malicious Adobe-themed Device Code phishing payload. By impersonating a trusted brand like Adobe and targeting high-value sectors — banking, government, and manufacturing — attackers maximize the likelihood of capturing privileged credentials. The Device Code flow abuse is particularly dangerous because it can bypass multi-factor authentication by tricking users into authorizing attacker-controlled sessions. This matters because compromised credentials in these sectors can lead to large-scale data breaches, regulatory violations, and disruption of critical infrastructure.