en· CERT
[Phishing kit] MonCompteFormation 'Lead' phishing kit - an analysis
In mid-December 2024, while checking the new findings of Stalkphish.io (our phishing URL detection, enrichment and investigation platform), I noticed that a…
en· investigation
[Phishing kit] Coinbase phishing kit with live admin panel to bypass MFA - an analysis.
An analysis of a Coinbase phishing kit designed to steal personal data, login, password and the second factor of authentication (MFA/2FA).
· CERT
Une campagne de phishing Netflix, Société Générale, Ameli ou Crit'air pour 10€
Chez Stalkphish nous nous plongeons - depuis plusieurs mois - dans certains réseaux de "scama", de scammers (arnaqueurs), pratiquant des campagnes de phishing parfois assez volumineuses et qui touchent plusieurs marques, enseignes ou services du gouvernement français, comme Ameli/Carte vitale, la vignette Crit'Air, les împots, ainsi que des services privés comme Netflix ou des services bancaires tels que ceux de la Société Générale, la Banque Postale, et bien d'autres.
en· CERT
[Use case] Hunting for phishing pages
Fight phishing (aka "Phight") is not an easy task, you need to detect a campaign before starting to dismantle it. You can compare that to a race: the faster…
en· phishing
[Phishing kit] LinkedIn phishing kit targeting Chinese users - an analysis
At StalkPhish we like dissecting Phishing kits, first because we create Yara rules for detection, secondly because we must continually keep up to date with new…
en· phishing
[Phishing kit] M&T Bank - Telegram exfiltration kit, without any Telegram link
One of the latest kits downloaded by StalkPhish targets customers of the online bank M&T. It has a special feature that we wanted to share with you. We still…
en· phishing
[Phishing kit] 'Moha' kit, targeting DEWA suppliers
At StalkPhish we like dissecting Phishing kits, first because we create Yara rules for detection, secondly because we must continually keep up to date with new…