· CERT
[Phishing kit] Caisse d'Epargne 'Don' phishing kit - an analysis
Analysis of the 'Don' phishing kit impersonating Caisse d'Epargne (BPCE group), downloaded by StalkPhish.io in December 2023: structure and configuration.
Open Source
StalkPhish-OSS
The phishing kits stalker: find phishing kit sources in OSINT databases and exploit what scammers left behind.
Clone the repository
$ git clone https://github.com/t4d/StalkPhish-OSS.git
StalkPhish-OSS is an open source tool designed to detect and analyze phishing kits using public OSINT databases.
Its primary purpose is to identify phishing kit sources that some scammers forget to remove after deployment. Analyzing these sources can reveal valuable information for investigations: email addresses used to collect stolen data, as well as clues about the scammer’s identity or the kit developer.
Features
- Search for phishing kit URLs via OSINT databases
- Check if kits are still active
- Generate page hashes for identification
- Automatically download kit sources (.zip) when available
- Extract emails found within kits
- HTTP and SOCKS5 proxy support
- Timestamp-based history tracking
- AS number storage in database
Related articles
· phishing
[Phishing kit] Scammer vs Scammer - backdoored phishing kit
An XBalti phishing kit targeting Chase customers, hiding a backdoor that leaks the stolen data to someone else: when scammers rob each other.
· phishing
Phishing kit using Google sheet to exfiltrate stolen data
Analysis of a phishing kit targeting Vietnamese Facebook users, which sends the stolen credentials to an online Google Sheet with an AJAX POST request.
Phishing campaigns move fast. So should you.
Start with a free search, or talk to us about API access and custom intelligence for your brand.