Phishing Kit Leverages DNS MX Records to Trick Victims with Fake Login Pages
An overview of the Morphing Meerkat phishing kit, which abuses DNS MX records and DNS-over-HTTPS to dynamically generate convincing fake login pages. This analysis was originally written in March 2025.