· CERT
[Phishing kit] Caisse d'Epargne 'Don' phishing kit - an analysis
This phishing kit impersonates Caisse D'Epargne , a French bank, of BPCE Group. This kit was downloaded at the beginning of December 2023, by our phishing…
Open Source
StalkPhish-OSS
The phishing kits stalker: find phishing kit sources in OSINT databases and exploit what scammers left behind.
Clone the repository
$ git clone https://github.com/t4d/StalkPhish-OSS.git
StalkPhish-OSS is an open source tool designed to detect and analyze phishing kits using public OSINT databases.
Its primary purpose is to identify phishing kit sources that some scammers forget to remove after deployment. Analyzing these sources can reveal valuable information for investigations: email addresses used to collect stolen data, as well as clues about the scammer’s identity or the kit developer.
Features
- Search for phishing kit URLs via OSINT databases
- Check if kits are still active
- Generate page hashes for identification
- Automatically download kit sources (.zip) when available
- Extract emails found within kits
- HTTP and SOCKS5 proxy support
- Timestamp-based history tracking
- AS number storage in database
Related articles
· phishing
[Phishing kit] Scammer vs Scammer - backdoored phishing kit
Scammer world should be a hard thug life. A merciless world... with no pity... Some scammers try to steal other ones! What a shameless! During our researches we found one of those 'backdoored' phishing kit, let's have a fast dive into it.
· phishing
Phishing kit using Google sheet to exfiltrate stolen data
Analysis of a Facebook phishing kit which exfiltrate stolen data to an online Google Sheet using ajax POST method.
Phishing campaigns move fast. So should you.
Start with a free search, or talk to us about API access and custom intelligence for your brand.