· CERT
[StalkPhish.io] Phishing Kit family enrichment
Since last summer, StalkPhish.io , our advanced platform dedicated to combating bank fraud, phishing, and scams, has been upgraded with a system for…
· CERT
[Phishing kit] Caisse d'Epargne 'Don' phishing kit - an analysis
This phishing kit impersonates Caisse D'Epargne , a French bank, of BPCE Group. This kit was downloaded at the beginning of December 2023, by our phishing…
· CERT
[Threat intelligence] About the Phishing as a Service tool named "Greatness"
Find a short analysis of the "Greatness" phishing kit used by a new Phishing as a Service infrastructure. Added some original IOCs for detection and hunting.
· investigation
[Phishing kit] Coinbase phishing kit with live admin panel to bypass MFA - an analysis.
An analysis of a Coinbase phishing kit designed to steal personal data, login, password and the second factor of authentication (MFA/2FA).
· CERT
[Use case] Hunting for phishing pages
Fight phishing (aka "Phight") is not an easy task, you need to detect a campaign before starting to dismantle it. You can compare that to a race: the faster…
· phishing
[Phishing kit] LinkedIn phishing kit targeting Chinese users - an analysis
At StalkPhish we like dissecting Phishing kits, first because we create Yara rules for detection, secondly because we must continually keep up to date with new…
· phishing
[Phishing kit] M&T Bank - Telegram exfiltration kit, without any Telegram link
One of the latest kits downloaded by StalkPhish targets customers of the online bank M&T. It has a special feature that we wanted to share with you. We still…
· phishing
[Phishing kit] 'Moha' kit, targeting DEWA suppliers
At StalkPhish we like dissecting Phishing kits, first because we create Yara rules for detection, secondly because we must continually keep up to date with new…
· PhishingKit-Yara-Rules
Using PhishingKit-Yara-Rules with ClamAV
As a reminder, the PhishingKit-Yara-Rules project is a free and open source project which provides several dozen phishing kit detection rules contained in zip…
· phishing
[Use case] Using Phishing-Kit-Yara-Rules project for phishing kits detection and triage
Since some months now, we maintain specific Yara rules to detect phishing kit sources (.zip files). Phishing kits sources are sometimes left on the host…
· phishing
Phishing kit using Google sheet to exfiltrate stolen data
Analysis of a Facebook phishing kit which exfiltrate stolen data to an online Google Sheet using ajax POST method.