en· CERT
[Phishing kit] MonCompteFormation 'Lead' phishing kit - an analysis
Analysis of the 'Lead' phishing kit impersonating MonCompteFormation (CPF), found in December 2024: pages, PHP scripts, logs and Telegram traces.
en· investigation
[Phishing kit] Coinbase phishing kit with live admin panel to bypass MFA - an analysis.
Teardown of the HadySpeed Coinbase phishing kit: a live admin panel lets the scammer interact with victims in real time to steal their 2FA codes.
· CERT
Une campagne de phishing Netflix, Société Générale, Ameli ou Crit'air pour 10€
Plongée dans un réseau de « scama » francophone qui propose des campagnes de phishing clés en main à 10 € contre Netflix, Société Générale, Ameli ou Crit'Air.
en· CERT
[Use case] Hunting for phishing pages
Use case: detect phishing campaigns early by hunting phishing pages with StalkPhish, combining several data sources to find and take down sites faster.
en· phishing
[Phishing kit] LinkedIn phishing kit targeting Chinese users - an analysis
A minimalist LinkedIn phishing kit written in Chinese: three PHP pages that email the stolen credentials, probably derived from a kit sold by Fudsender.
en· phishing
[Phishing kit] M&T Bank - Telegram exfiltration kit, without any Telegram link
An M&T Bank phishing kit that sends stolen data to Telegram without a single line of Telegram code, through an etlgr.com email-to-Telegram relay.
en· phishing
[Phishing kit] 'Moha' kit, targeting DEWA suppliers
Analysis of the 'Moha' phishing kit targeting suppliers of the Dubai Electricity and Water Authority: a self-contained 1.2 MB kit that logs its visitors.