Wazza Phishkit Uses Multi-Stage Routing to Evade Detection

A new phishing kit called Wazza is targeting banking, manufacturing, and government organizations in the US, Europe, and Australia. Unlike traditional phishing kits, Wazza employs a multi-stage routing chain to filter visitors and manage traffic before delivering an Adobe-themed Device Code phishing page. This approach complicates automated detection and makes initial links less informative, posing challenges for security teams. The campaign’s infrastructure uses multiple domains and endpoints to validate sessions and filter unwanted traffic, making it difficult for automated security systems to detect the phishing page immediately.