Okta: AI-generated phishing kits appear weekly

Okta threat intelligence director Jeremy Kirk said at Oktane 2026 that his team finds at least one vibe-coded phishing kit variant every week. These tools let low-skilled attackers steal credentials and MFA tokens, and hijack AI agent sessions.

• Okta sees at least one vibe-coded phishing kit per week
• The Work Panel kit clones Okta, Microsoft 365 and Salesforce login pages
• Target search in the kit runs through RocketReach
• Kirk urges phishing-resistant authentication on every account path