PhishingKitTracker @PhishKitTracker

Project Paused 1/11/22, Tracked Threat Actor Emails in Phishing Kits. CC @PhishKitTracker if you find a #phishingkit , created by @neonprimetime github.com/neonprimetime/… Joined May 2019

Tweets

831
Followers

3K
Following

1
Likes

1K

Jake | JCyberSec_ @JCyberSec_

4 years ago

@PhishKitTracker @ActorExpose @Jouliok @andpalmier @ANeilan @nullcookies @ozuma5119 @phishunt_io @sysgoblin @dubstard This isn't goodbye but more of a shift in targeting. If you ever need anything feel free to DM me. I still regularly use your data so thanks for the hard work on the tracker over the last few years!

1 1 6 0 0

Jake | JCyberSec_ @JCyberSec_

4 years ago

KIT Intel is a tool for phishing kit research...at scale. 📁 Upload, Analyze, Cluster, and Research phishing kits like never before.

1 5 12 0 0

Download Image

Jake | JCyberSec_ @JCyberSec_

4 years ago

So you want to learn about phishing kits 🧑‍🎓 🧵 In this thread I will highlight threat hunting skills and IoCs within phishing kits to look for ⤵️ Retweets are appreciated ♻️ 🔍Follow me for more #phishing intelligence @JCyberSec_

3 102 211 0 99

Download Image

Jake | JCyberSec_ @JCyberSec_

4 years ago

@illegalFawn @malwrhunterteam @JAMESWT_MHT @Bank_Security @olihough86 @dubstard @YourAnonRiots @andsyn1 @douglasmun @SwiftOnSecurity This is a utoxic Office phishing kit. There should be 2 files on the root - License.txt maillist.txt The kit is complex with heavy obfuscation in place as well

2 6 18 0 1

Download Image

Jake | JCyberSec_ @JCyberSec_

4 years ago

@SteveD3 @Ledtech3 @MalwareJake @nullcookies @dyngnosis @olihough86 @dave_daves @n0p1shing @ANeilan @selenalarson Always pivot - The second email address 'ricadojerry' has been linked to a large number of phishing kits targeting Office, Yahoo, DHL, and Gmail. Can be seen here in the archived @PhishKitTracker run by @neonprimetime Linked tweet -

Paul Sec.jpeg .exe @PaulWebSec

6 years ago

1 0 2 0 0

1 1 4 0 0

Download Image

MalwareHunterTeam @malwrhunterteam

4 years ago

What you think, why Gmail still does nothing about the 1000s of phished credentials going to skids' Gmail inboxes daily? A: They dgaf. B: 3 char agencies of US prefer searching in those inboxes when they want access to somewhere than compromising themselves. C: A+B.

3 6 16 0 0

neonprimetime @neonprimetime

5 years ago

here is REAL #phishing many companies received last year urlscan.io/search/#sharep…

Lorraine Longhi 🌵 @lolonghi

5 years ago

here is REAL #phishing many companies received last year urlscan.io/search/#sharep… https://t.co/OoffgFHXW5

542 3K 7K 0 455

0 4 4 0 0

Download Image

neonprimetime @neonprimetime

5 years ago

another abused service to watch for is @piktochart for credential #phishing like Canva and Zizera urlscan.io/search/#create… sample from a few days ago hxxps://create.piktochart[.]com/output/51172832-river-city-tax-consulting-llc urlscan.io/result/de91f2d…

1 3 3 0 0

Download Image

neonprimetime @neonprimetime

5 years ago

did you know survey gizmo is now named @AlchemerHQ ? It’s still abused for cred #phishing though ! Email Subject: Check #<no> payment survey.alchemer[.]com/s3/6076800/The-Drainman-Inc-Invoice urlscan.io/result/befc66c…