PhishingKit-Yara-Rules
YARA rules to identify phishing kits from their ZIP archives. Integrated into VirusTotal’s detection engine.
Open Source
Open source tools to hunt phishing kits
For years we have built and maintained free tools for analysts, CERTs and researchers. Our YARA rules are even part of VirusTotal’s detection engine.
Community
Open source, since day one
We build and maintain free tools used by analysts worldwide to hunt phishing kits.
StalkPhish-OSS
The phishing kits stalker: finds kit URLs in OSINT sources, downloads sources and extracts exfiltration emails.
PhishingKitHunter
Spots phishing kits reusing your own website files by analysing referers in your web server logs.
Le Dico du Scam
A collaborative glossary of the slang used in French-speaking scam and phishing networks, from Allo to Vouch.
Using our tools
· CERT
[StalkPhish.io] Phishing Kit family enrichment
StalkPhish.io now classifies the phishing kits it collects by family, using the open source PhishingKit-Yara-Rules, to speed up qualification and investigation.
· cti
[Phishing] Current state of phishing threat using Paris 2024 Olympic games branding (June 24)
Phishing sites impersonating the Paris 2024 Olympic and Paralympic Games, spotted by StalkPhish.io in June 2024 to steal personal and banking data.
· CERT
[Phishing kit] Caisse d'Epargne 'Don' phishing kit - an analysis
Analysis of the 'Don' phishing kit impersonating Caisse d'Epargne (BPCE group), downloaded by StalkPhish.io in December 2023: structure and configuration.
Phishing campaigns move fast. So should you.
Start with a free search, or talk to us about API access and custom intelligence for your brand.