John Fitzpatrick When DMCA Comes Knocking - Part 2: The Sign-in Window That Isn't The second of two posts on a DMCA themed phishing kit targeting YouTube creators. In this post we focus in on the Browser in The Browser (BiTB) component and the effort put into getting the polish just right... AiTM BitB Phishing
John Fitzpatrick When DMCA Comes Knocking - A YouTube Creator Phishing Kit, Part 1 This is the first of two posts on a DMCA-themed phishing kit we've been looking at recently. The kit goes after creator accounts on platforms that issue copyright complaints. This post covers the fron... AiTM BitB Phishing
Oleksandr Vengeruk Blob URLs - The Phishing Disguise Hiding in Your Browser Blob URLs - The Phishing Disguise Hiding in Your Browser In recent months we started noticing a growing number of phishing websites abusing a legitimate technology; Blob URLs. While these are not new,... AiTM Phishing
Oleksandr Vengeruk Azure Front Door AiTM Phishing We see new phishing toolkits and infrastructures all the time. Most of them are following the same patterns and are easy to spot. But, just a couple of weeks ago, during... AiTM Azure Microsoft Phishing