Phishing kit
A ready-made "kit" to deploy a fake login page — a copy of Microsoft, a bank, etc.
Sold on the dark web for $50-500. Contains: an HTML/CSS clone, a PHP backend that stores credentials, a Telegram bot for exfiltration. Phishing-as-a-Service (PhaaS) is the modern variant. Democratises phishing — anyone can be a threat.