Nearly half of the live phishing kits identified online have backdoors designed to steal from the information thieves using them.