New Phishing Kit Gives Threat Actors Live View into Attacks
KnowBe4, Friday, August 28th, 2026
KnowBe4 covers Cisco Talos research on JWR, a phishing kit that livestreams the victim's session to the attacker.
A new phishing platform called JWR gives attackers real-time control over social engineering attacks, according to researchers at Cisco Talos.
The kit livestreams the phishing page to the attacker while the victim is entering information, letting the attacker steer the experience as it unfolds rather than collecting credentials after the fact.
Using a WebSocket channel, the operator can capture payment details, two-factor authentication codes and credentials during smishing campaigns, and prompt the victim for whatever the attacker still needs. Live control defeats time-limited one-time codes, since the attacker uses them immediately.