TI Mindmap HUB
Threat Intelligence Report

Hook, line, and vault: A technical deep dive into the 1Phish kit

📅 February 28, 2026 📰 securitylabs.datadoghq.com 🔍 0 CVE(s) referenced

The 1Phish kit has rapidly evolved into a sophisticated, multi-stage phishing platform targeting 1Password users with MFA-aware workflows, advanced anti-analysis controls, and API-driven credential harvesting—demonstrating that password manager phishing is now operationally mature and increasingly difficult to detect.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle