Inside a phishing kit: how a $40 toolkit fools a million people

A look at the surprisingly professional software supply chain behind everyday scam emails. Off-the-shelf phishing kits now ship with customer support, A/B tested templates, and dashboards that track click-through rates like any legitimate SaaS product.

Understanding how polished these operations have become is the first step to building better instincts — and better filters — against them.