Evilginx-Phishing-Infra-Setup

피싱 공격 인프라 설정 가이드 참고: 이는 제 개인 노트의 복사본입니다. 이 내용을 완전히 신뢰하지 마세요. 목차 블로그/발표 레드팀/피싱 인프라 자동화 도메인 구매 및 분류 기법 도구를 사용한 피싱 이메일 작성 개선 이메일 스팸성 테스트 피싱 이메일 모의 / 퍼플팀 피싱 Awesome Enterprise Email Security 이메일을 받은편지함에 전달하기 Evilginx를 이용한 피싱 공격 Evilginx Phishlet 구축 Evilginx 설치 스크립트 Evilginx 인프라 보안 팁 Evilginx 연구 블로그/발...

Red-Team-Infrastructure-Wiki

Questa wiki è pensata per fornire una risorsa per l'impostazione di un'infrastruttura Red Team resiliente. È stata creata per integrare il talk di Steve Borosh @424f424f e Jeff Dimmock @bluscreenofjeff al BSides NoVa 2017 "Doomsday Preppers: Fortifying Your Red Team Infrastructure" slides Se hai...

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

In this article 1. Multi-step social engineering campaign leading to credential theft 2. Mitigation and protection guidance 3. Microsoft Defender detections 4. Hunting queries 5. Indicators of compromise Phishing campaigns continue to improve sophistication and refinement in blending social...

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

Cybersecurity researchers have disclosed details of what has been described as a "sustained and targeted" spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft. The activity, which involved uploading 27 npm packages from six differen...

Microsoft advertisers phished via malicious Google ads

Just days after we uncovered a campaign targeting Google Ads accounts, a similar attack has surfaced, this time aimed at Microsoft advertisers. These malicious ads, appearing on Google Search, are designed to steal the login information of users trying to access Microsoft's advertising platform...

Kimsuky APT continues to target South Korean government using AppleSeed backdoor

This blog post was authored by Hossein Jazi. The Kimsuky APT—also known as Thallium, Black Banshee, and Velvet Chollima—is a North Korean threat actor that has been active since 2012. The group conducts cyber espionage operations to target government entities mainly in South Korea. On December...