InfoSecBulletin Cybersecurity for mankind
A new phishing kit called “Spiderman” poses a serious threat to European bank customers, allowing cybercriminals to easily generate realistic fake login pages for multiple banks.
The Spiderman phishing kit is notable for its all-in-one design, combining login templates for various European banks and cryptocurrency platforms into a single, easy-to-use interface.
Meta’s louisiana data center to exceed 250 billion price tag
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
Critical Dell BIOS & Zimbra Flaws Expose Enterprise Systems
CoLoCity Launches New 1.0 MW Data Center Facility at Gulshan
Daily Cyber security update for 10. 07. 2026
How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours
Mycelium Framework: First AI-as-a-Service Botnet
CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents
Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection
Spiderman offers attackers pre-made clones of major banks in five countries, such as Deutsche Bank, Commerzbank, ING, and CaixaBank, unlike traditional phishing kits that target specific institutions.
Security researchers found around 750 members in a Signal messenger group linked to the toolkit’s seller, showing its widespread use in the cybercriminal community.
Spiderman’s danger lies in its automation. Attackers don’t need web development skills or technical know-how to execute advanced phishing schemes.
The kit simplifies the process for criminals to choose a bank, create an exact copy of its login page, and launch phishing attacks quickly. The toolkit includes a control panel that tracks victim sessions in real time, collecting usernames, passwords, credit card details, PhotoTAN codes, and personal identification information.
Varonis reports that this multi-step method aims to evade European banking security, including two-factor authentication.
Spiderman uses advanced anti-detection features like country allow listing, ISP filtering, and device-type restrictions. These features allow attackers to bypass security scanners and automated detection tools by blocking traffic from data centers, VPNs, and research groups.
The kit now focuses on cryptocurrency users, including modules for extracting seed phrases from Ledger, MetaMask, and Exodus wallets, indicating a trend toward hybrid banking and crypto fraud.
