StalkPhish provides B2B tools, data and knowledge to detect phishing, scams and brand impersonation, and to track the threat actors behind them.https://stalkphish.com/https://stalkphish.com/2026/01/01/8-powerful-use-cases-for-the-stalkphish-api-in-anti-fraud-and-anti-phishing-operations/https://stalkphish.com/2026/01/01/8-powerful-use-cases-for-the-stalkphish-api-in-anti-fraud-and-anti-phishing-operations/Phishing remains one of the most persistent threats facing organizations today. According to recent reports, phishing attacks account for over 80% of reported…Thu, 01 Jan 2026 00:00:00 GMTCSIRTctihuntinginvestigationphishingphishing kitsocStalkPhish.iothreat analysisthreat intelligencevishinghttps://stalkphish.com/2025/11/05/stalkphish-io-advanced-phishing-detection-with-one-api/https://stalkphish.com/2025/11/05/stalkphish-io-advanced-phishing-detection-with-one-api/At StalkPhish, we've been committed to staying ahead of phishing threats and providing our users with the most comprehensive tools for detecting and…Wed, 05 Nov 2025 00:00:00 GMThttps://stalkphish.com/2025/09/15/smishing-a-la-francaise-collection-automne-hiver-2025-2026/https://stalkphish.com/2025/09/15/smishing-a-la-francaise-collection-automne-hiver-2025-2026/Nouvelles techniques de smishing utilisées par les scammers francophones depuis début 2025 pour escroquer leurs victimes.Mon, 15 Sep 2025 00:00:00 GMTCERTCSIRTctiEtudeinvestigationStalkPhish.iothreat intelligencehttps://stalkphish.com/2025/07/06/from-phishing-detection-to-anti-fraud-investigation/https://stalkphish.com/2025/07/06/from-phishing-detection-to-anti-fraud-investigation/At StalkPhish, our core business includes, among other things, phishing detection. Every day we detect, enrich, and sort tens of thousands of phishing URLs…Sun, 06 Jul 2025 00:00:00 GMThttps://stalkphish.com/2025/01/17/phishing-kit-moncompteformation-lead-phishing-kit-an-analysis/https://stalkphish.com/2025/01/17/phishing-kit-moncompteformation-lead-phishing-kit-an-analysis/In mid-December 2024, while checking the new findings of Stalkphish.io (our phishing URL detection, enrichment and investigation platform), I noticed that a…Fri, 17 Jan 2025 00:00:00 GMTCERTctihuntinginvestigationphishingphishing kitStalkPhish.iothreat analysisthreat intelligencehttps://stalkphish.com/2024/10/10/stalkphish-io-phishing-kit-family-enrichment/https://stalkphish.com/2024/10/10/stalkphish-io-phishing-kit-family-enrichment/Since last summer, StalkPhish.io , our advanced platform dedicated to combating bank fraud, phishing, and scams, has been upgraded with a system for…Thu, 10 Oct 2024 00:00:00 GMTCERTCSIRTctihuntinginvestigationOSINTphishing kitPhishingKit-Yara-RulessocStalkPhish.iothreat analysisthreat intelligencetoolhttps://stalkphish.com/2024/06/20/phishing-current-state-of-phishing-threat-using-paris-2024-olympic-games-branding-june-24/https://stalkphish.com/2024/06/20/phishing-current-state-of-phishing-threat-using-paris-2024-olympic-games-branding-june-24/With the Paris 2024 Olympic and Paralympic Games approaching, a host of scams have been developed and deployed, including phishing pages harvesting personal and banking data.Thu, 20 Jun 2024 00:00:00 GMTctiinvestigationphishingStalkPhish.iothreat intelligencetoolhttps://stalkphish.com/2024/03/25/stalkphish-io-professional-plan/https://stalkphish.com/2024/03/25/stalkphish-io-professional-plan/We launch our first paid plan for Stalkphish.io our SaaS dedicated to detection and investigation of phishing/brand impersonation.Mon, 25 Mar 2024 00:00:00 GMTCERTCSIRTctihuntingOSINTphishingphishing kitsocStalkPhish.iothreat analysisthreat intelligencehttps://stalkphish.com/2024/01/27/phishing-kit-caisse-epargne-don-an-analysis/https://stalkphish.com/2024/01/27/phishing-kit-caisse-epargne-don-an-analysis/This phishing kit impersonates Caisse D'Epargne , a French bank, of BPCE Group. This kit was downloaded at the beginning of December 2023, by our phishing…Sat, 27 Jan 2024 00:00:00 GMTCERTCSIRTctiinvestigationOSINTphishingphishing kitPhishingKit-Yara-RulesStalkphishStalkPhish.iothreat analysishttps://stalkphish.com/2023/07/04/threat-intelligence-about-the-paas-named-greatness/https://stalkphish.com/2023/07/04/threat-intelligence-about-the-paas-named-greatness/Find a short analysis of the "Greatness" phishing kit used by a new Phishing as a Service infrastructure. Added some original IOCs for detection and hunting.Tue, 04 Jul 2023 00:00:00 GMTCERTCSIRTctihuntinginvestigationOSINTphishingphishing kitPhishingKit-Yara-Rulesthreat intelligencehttps://stalkphish.com/2023/01/25/phishing-kit-coinbase-phishing-kit-with-live-admin-panel-to-bypass-mfa-an-analysis/https://stalkphish.com/2023/01/25/phishing-kit-coinbase-phishing-kit-with-live-admin-panel-to-bypass-mfa-an-analysis/An analysis of a Coinbase phishing kit designed to steal personal data, login, password and the second factor of authentication (MFA/2FA).Wed, 25 Jan 2023 00:00:00 GMTinvestigationphishingphishing kitPhishingKit-Yara-RulesStalkPhish.iothreat intelligencehttps://stalkphish.com/2022/12/19/une-campagne-de-phishing-netflix-societe-generale-ameli-ou-critair-pour-10-euros/https://stalkphish.com/2022/12/19/une-campagne-de-phishing-netflix-societe-generale-ameli-ou-critair-pour-10-euros/Chez Stalkphish nous nous plongeons - depuis plusieurs mois - dans certains réseaux de "scama", de scammers (arnaqueurs), pratiquant des campagnes de phishing parfois assez volumineuses et qui touchent plusieurs marques, enseignes ou services du gouvernement français, comme Ameli/Carte vitale, la vignette Crit'Air, les împots, ainsi que des services privés comme Netflix ou des services bancaires tels que ceux de la Société Générale, la Banque Postale, et bien d'autres.Mon, 19 Dec 2022 00:00:00 GMTCERTCSIRTctiEtudehuntinginvestigationOSINTphishingphishing kitsocStalkPhish.iothreat analysisthreat intelligencetoolhttps://stalkphish.com/2022/10/16/stalkphish-io-launch-of-our-standard-plan-to-better-detect-and-fight-phishing/https://stalkphish.com/2022/10/16/stalkphish-io-launch-of-our-standard-plan-to-better-detect-and-fight-phishing/We launch our first paid plan for Stalkphish.io our SaaS dedicated to detection and investigation of phishing/brand impersonation.Sun, 16 Oct 2022 00:00:00 GMTCERTCSIRTctihuntingOSINTphishingphishing kitsocStalkPhish.iothreat analysisthreat intelligencehttps://stalkphish.com/2022/09/05/use-case-hunting-for-phishing/https://stalkphish.com/2022/09/05/use-case-hunting-for-phishing/Fight phishing (aka "Phight") is not an easy task, you need to detect a campaign before starting to dismantle it. You can compare that to a race: the faster…Mon, 05 Sep 2022 00:00:00 GMTCERTCSIRTctihuntingOSINTphishingphishing kitPhishingKit-Yara-RulessocStalkPhish.iothreat analysisthreat intelligencehttps://stalkphish.com/2022/07/28/linkedin-phishing-kit-targeting-chinese-users-an-analysis/https://stalkphish.com/2022/07/28/linkedin-phishing-kit-targeting-chinese-users-an-analysis/At StalkPhish we like dissecting Phishing kits, first because we create Yara rules for detection, secondly because we must continually keep up to date with new…Thu, 28 Jul 2022 00:00:00 GMTphishingphishing kitPhishingKit-Yara-RulesStalkPhish.iothreat analysishttps://stalkphish.com/2022/04/04/threat-intelligence-using-stalkphish-io-with-intelowl-to-speed-up-threat-analysis/https://stalkphish.com/2022/04/04/threat-intelligence-using-stalkphish-io-with-intelowl-to-speed-up-threat-analysis/Using StalkPhish.io analyzer as a threat intelligence feed for IntelOwl to speed up your threat analysis.Mon, 04 Apr 2022 00:00:00 GMTCERTCSIRTctiOSINTphishingsocStalkPhish.iothreat analysisthreat intelligencehttps://stalkphish.com/2022/03/14/phishing-kit-mt-bank-telegram-exfiltration-kit-without-any-telegram-link/https://stalkphish.com/2022/03/14/phishing-kit-mt-bank-telegram-exfiltration-kit-without-any-telegram-link/One of the latest kits downloaded by StalkPhish targets customers of the online bank M&T. It has a special feature that we wanted to share with you. We still…Mon, 14 Mar 2022 00:00:00 GMTphishingphishing kitPhishingKit-Yara-Rulestoolhttps://stalkphish.com/2022/02/04/phishing-kit-moha-kit-targeting-dewa-suppliers/https://stalkphish.com/2022/02/04/phishing-kit-moha-kit-targeting-dewa-suppliers/At StalkPhish we like dissecting Phishing kits, first because we create Yara rules for detection, secondly because we must continually keep up to date with new…Fri, 04 Feb 2022 00:00:00 GMTphishingphishing kitPhishingKit-Yara-Ruleshttps://stalkphish.com/2022/01/25/using-phishingkit-yara-rules-with-clamav/https://stalkphish.com/2022/01/25/using-phishingkit-yara-rules-with-clamav/As a reminder, the PhishingKit-Yara-Rules project is a free and open source project which provides several dozen phishing kit detection rules contained in zip…Tue, 25 Jan 2022 00:00:00 GMTPhishingKit-Yara-Rulestoolhttps://stalkphish.com/2021/11/14/several-domain-names-one-protected-redirector-one-phishing-campaign/https://stalkphish.com/2021/11/14/several-domain-names-one-protected-redirector-one-phishing-campaign/Sometimes phishing campaigns are not conduced with phishing kits only, actors behind those phishing campaigns can use different tricks to prevent their work…Sun, 14 Nov 2021 00:00:00 GMTphishingphishing redirectorhttps://stalkphish.com/2021/08/17/using-phishing-kit-yara-rules-project-for-phishing-kits-detection-and-triage/https://stalkphish.com/2021/08/17/using-phishing-kit-yara-rules-project-for-phishing-kits-detection-and-triage/Since some months now, we maintain specific Yara rules to detect phishing kit sources (.zip files). Phishing kits sources are sometimes left on the host…Tue, 17 Aug 2021 00:00:00 GMTphishingphishing kitPhishingKit-Yara-Ruleshttps://stalkphish.com/2021/06/30/howto-stalkphish-io/https://stalkphish.com/2021/06/30/howto-stalkphish-io/StalkPhish.io is a SaaS application which provides enriched data about potential phishing URL or brand impersonation use, with a REST API.Wed, 30 Jun 2021 00:00:00 GMTphishingphishing kittoolhttps://stalkphish.com/2021/04/22/scammer_vs_scammer_backdoored_phishing_kit/https://stalkphish.com/2021/04/22/scammer_vs_scammer_backdoored_phishing_kit/Scammer world should be a hard thug life. A merciless world... with no pity... Some scammers try to steal other ones! What a shameless! During our researches we found one of those 'backdoored' phishing kit, let's have a fast dive into it.Thu, 22 Apr 2021 00:00:00 GMTphishingphishing kitStalkphishhttps://stalkphish.com/2021/04/09/phishing-kit-using-google-sheet-to-exfiltrate-stolen-data/https://stalkphish.com/2021/04/09/phishing-kit-using-google-sheet-to-exfiltrate-stolen-data/Analysis of a Facebook phishing kit which exfiltrate stolen data to an online Google Sheet using ajax POST method.Fri, 09 Apr 2021 00:00:00 GMTphishingphishing kitPhishingKit-Yara-RulesStalkphishhttps://stalkphish.com/2020/12/14/how-phishing-kits-use-telegram/https://stalkphish.com/2020/12/14/how-phishing-kits-use-telegram/More and more actors uses Telegram chat groups to exfiltrate harvested data, we'll show you how we can collect informations about those actors. Let’s have a dive into one of this kits.Mon, 14 Dec 2020 00:00:00 GMTphishingphishing kithttps://stalkphish.com/2019/12/06/israel-outlook-credentials-harvester/https://stalkphish.com/2019/12/06/israel-outlook-credentials-harvester/An analysis of a phishing kit found with StalkPhish tool. This phishing kit impersonating a professional Outlook login pattern and exfiltrate credentials on an online portal (FormBuddy)... with no success.Fri, 06 Dec 2019 00:00:00 GMTphishingphishing kit