Tangled

Tangled Tangled は、攻撃的セキュリティの観点から設計されたフィッシングプラットフォームです。 ソーシャルエンジニアリングキャンペーンの配信における多くの側面を自動化し、Microsoft Outlook および Gmail Google Workspace の iCalendar レンダリング機能を武器化して、ユーザーの操作なしに自動的にカレンダーに追加される偽装された会議招待状を配信します。 技術的な解説を読む: カレンダー自動処理を悪用した初期アクセスと横移動 ドキュメント 完全なドキュメントは Gitbook にあります。 クイックスタート Tangled は...

EvilnoVNC

EvilnoVNC EvilnoVNC 는 즉시 사용 가능한 피싱 플랫폼입니다. 다른 피싱 기술과 달리 EvilnoVNC는 noVNC 연결을 통해 실제 브라우저를 사용하여 2FA를 우회할 수 있습니다. 또한 이 도구를 사용하면 피해자의 모든 작업을 실시간으로 확인하고, 다운로드한 파일 및 쿠키, 저장된 비밀번호, 검색 기록 등을 포함한 전체 브라우저 프로필에 액세스할 수 있습니다. 요구 사항 Docker Chromium 다운로드 전체 리포지토리를 복제하거나 zip 파일을 다운로드하는 것이 좋습니다. 또한 Docker를 수동으로...

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

An INTERPOL-led operation last month resulted in the disruption of Sniper Dz , a decade-long phishing-as-a-service PhaaS platform, Group-IB said Thursday. The effort, codenamed Operation Ramz, took place between October 2025 and February 2026, and saw authorities from 13 countries in the Middle...

Email threat landscape: Q1 2026 trends and insights

In this article 1. Tycoon2FA disruption impact 2. QR code phishing attacks 3. CAPTCHA tactics 4. Malicious payloads 5. Business email compromise 6. Defending against email threats 7. Microsoft Defender detections During the first quarter of 2026 January-March, Microsoft Threat Intelligence detect...

Authorities Shut Down Tycoon 2FA Phishing Platform Used to Bypass MFA

Europol and partners dismantle Tycoon 2FA phishing service used to bypass MFA, disrupting a global phishing-as-a-service operation targeting organisations...

Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform

Google has filed a civil lawsuit in the U.S. District Court for the Southern District of New York SDNY against China-based hackers who are behind a massive Phishing-as-a-Service PhaaS platform called Lighthouse that has ensnared over 1 million users across 120 countries. The PhaaS kit is used to...

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

The threat actors behind the Darcula phishing-as-a-service PhaaS platform have released new updates to their cybercrime suite with generative artificial intelligence GenAI capabilities. "This addition lowers the technical barrier for creating phishing pages, enabling less tech-savvy criminals to...

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

More than 140,000 phishing websites have been found linked to a phishing-as-a-service PhaaS platform named Sniper Dz over the past year, indicating that it's being used by a large number of cybercriminals to conduct credential theft. "For prospective phishers, Sniper Dz offers an online admin pan...

Law enforcement reels in phishing-as-a-service whopper

A major international law enforcement effort involving agencies from 19 countries has disrupted the notorious LabHost phishing-as-a-service platform. Europol reports that the organizations infrastructure has been compromised, its website shut down, and 37 suspects arrested, including four people ...