JWR phishing kit targets victims via SMS links, stealing card details, passwords, and OTPs through live fraud sessions.