PhishingKit-Yara-Rules
YARA rules to identify phishing kits from their ZIP archives. Integrated into VirusTotal’s detection engine.
Open Source
Open source tools to hunt phishing kits
For years we have built and maintained free tools for analysts, CERTs and researchers. Our YARA rules are even part of VirusTotal’s detection engine.
Community
Open source, since day one
We build and maintain free tools used by analysts worldwide to hunt phishing kits.
StalkPhish-OSS
The phishing kits stalker: finds kit URLs in OSINT sources, downloads sources and extracts exfiltration emails.
PhishingKitHunter
Spots phishing kits reusing your own website files by analysing referers in your web server logs.
Using our tools
· CERT
[StalkPhish.io] Phishing Kit family enrichment
Since last summer, StalkPhish.io , our advanced platform dedicated to combating bank fraud, phishing, and scams, has been upgraded with a system for…
· cti
[Phishing] Current state of phishing threat using Paris 2024 Olympic games branding (June 24)
With the Paris 2024 Olympic and Paralympic Games approaching, a host of scams have been developed and deployed, including phishing pages harvesting personal and banking data.
· CERT
[Phishing kit] Caisse d'Epargne 'Don' phishing kit - an analysis
This phishing kit impersonates Caisse D'Epargne , a French bank, of BPCE Group. This kit was downloaded at the beginning of December 2023, by our phishing…
Phishing campaigns move fast. So should you.
Start with a free search, or talk to us about API access and custom intelligence for your brand.