Phishers the world over have been patronizing and utilizing the 16shop phishing kit since at least 2018. The kit’s users have been known to steal data and money from the customers of some of today’s biggest brands, including Amazon, American Express, and PayPal.