· StalkPhish.io
Is that link phishing? Meet the StalkPhish URL scanner (closed beta)
Check a suspicious link without opening it: the StalkPhish URL scanner follows redirects and cloaking, and gives a phishing score with evidence. Closed beta.
Category
threat analysis
In-depth analyses of phishing threats, from the first detection to the understanding of the whole campaign. 11 articles.All articles
· CSIRT
[StalkPhish.io] 8 Powerful Use Cases for the StalkPhish API in Anti-Fraud and Anti-Phishing Operations
Brand protection, SOC enrichment, threat hunting, Telegram exfiltration tracking: eight practical ways to use the StalkPhish API against phishing and fraud.
· CERT
[Phishing kit] MonCompteFormation 'Lead' phishing kit - an analysis
Analysis of the 'Lead' phishing kit impersonating MonCompteFormation (CPF), found in December 2024: pages, PHP scripts, logs and Telegram traces.
· CERT
[StalkPhish.io] Phishing Kit family enrichment
StalkPhish.io now classifies the phishing kits it collects by family, using the open source PhishingKit-Yara-Rules, to speed up qualification and investigation.
· CERT
Stalkphish.io - Launch of our Professional Plan
The StalkPhish.io Professional plan: 5,000 API requests a day, 6 months of history, and exclusive threat actor tracking and brand targeting.
· CERT
[Phishing kit] Caisse d'Epargne 'Don' phishing kit - an analysis
Analysis of the 'Don' phishing kit impersonating Caisse d'Epargne (BPCE group), downloaded by StalkPhish.io in December 2023: structure and configuration.
fr· CERT
Une campagne de phishing Netflix, Société Générale, Ameli ou Crit'air pour 10€
Plongée dans un réseau de « scama » francophone qui propose des campagnes de phishing clés en main à 10 € contre Netflix, Société Générale, Ameli ou Crit'Air.
· CERT
Stalkphish.io - Launch of our Standard Plan to better detect and fight phishing
Launch of the StalkPhish.io Standard plan: SSL/TLS certificate data, Google Safe Browsing status, phishing score and searches in page titles.
· CERT
[Use case] Hunting for phishing pages
Use case: detect phishing campaigns early by hunting phishing pages with StalkPhish, combining several data sources to find and take down sites faster.
· phishing
[Phishing kit] LinkedIn phishing kit targeting Chinese users - an analysis
A minimalist LinkedIn phishing kit written in Chinese: three PHP pages that email the stolen credentials, probably derived from a kit sold by Fudsender.
· CERT
[Threat intelligence] Using StalkPhish.io with Intel Owl to speed up threat analysis
How to use the StalkPhish.io analyzer in IntelOwl, the open source threat intelligence platform, to enrich observables and speed up phishing analysis.