38 new and updated phishing kits in January 2026

January 30
Enhancement
BullPhish ID, Kaseya 365 User

BullPhish ID has added an additional 38 new and updated phishing kits in January, giving you a broader range of realistic scenarios to test and train end users. These kits reflect current phishing tactics and regional brands, so simulations better match what users see in their actual inboxes. 

The new phishing kits span across US, Sweden, Germany, Netherlands, French Canada, Spain, and Italy, enhancing localized simulation coverage. These new phishing kits include brands such as Uber, Qantas, Coles, Spotify and H&M. This mix of global and region-specific content helps you run targeted campaigns for different clients and user groups without building templates from scratch. 

With more localized, relevant simulations, you can drive higher engagement, surface true risk levels across your tenants, and deliver more effective remedial training. This helps reduce successful phishing attempts, strengthens security awareness programs, and demonstrates ongoing value to your clients. 

Learn more about expanded multilingual phishing simulations for BullPhish ID here. 

One complete platform for IT & security management

Kaseya 365 is the all-in-one solution for managing, securing, and automating IT. With seamless integrations across critical IT functions, it simplifies operations, strengthens security, and boosts efficiency.

The Vercel incident and the phishing campaigns already hiding in plain sight

Explore three phishing campaigns that are abusing Vercel’s free hosting platform as a key piece of their attack infrastructure and learn how to spot them.

Read blog post

Kaseya wins Gold Stevie® Award for customer service excellence at The 2026 American Business Awards®

At Kaseya, our mission is to empower our customers to simplify and transform IT and cybersecurity management with innovative solutions

Read blog post

What is bare metal recovery? Definition, process and when to use it

Hardware fails without warning. A system that was running fine at the end of the day can be completely inoperable

Read blog post