Netskope Threat Labs

SEToolkit

ATP Sandbox Adv. Heuristics

SEToolkit (the Social Engineer Toolkit) is an open source penetration testing framework that automates social engineering attacks such as phishing pages, malicious payloads, and fake software updates. Cyberattackers abuse it to stage credential harvesting and payload delivery, so its detections warrant verification against authorized testing.

First seen
August 2023
Last seen
October 2026
Alert Name
Binary.Malware.SEToolkit
Document-HTML.Exploit.SEToolkit
Package.PUA.SEToolkit
Package.Trojan.SEToolkit
Script-PowerShell.Malware.SEToolkit
Script-PowerShell.Trojan.SEToolkit