Other
Deep water: exploring phishing kits
Group-IB's Computer Emergency Response Team built a solid phishing kit database, which helps Group-IB fight phishing that targets specific brands.
Group-IB's Computer Emergency Response Team built a solid phishing kit database, which helps Group-IB fight phishing that targets specific brands.
The analysis of phishing campaigns carried out by a new threat actor
Hackers getting better at their tradecraft and their skills are becoming more and more accessible to other bad actors via the Dark Web.
Google Cloudshell leveraged websockets without validating that the origin matched the current instance host. An attacker could therefore host a CSWSH attack on a Cloudshell instance they own, disabling authentication via access to the underlying VM. They could then start the OAuth process with a spoofed host header, using phishing to get the target Cloud Shell user into following a redirection link, completing the OAuth process and ending in successful CSWSH, which would allow the attacker to h…
Cobalt Gang is alive and well, and continued to attack financial institutions around the globe in 2019.
Explore this phishing campaign used the age-old “Please remit payment” spiel to lure potential victims into opening the attached file.