Linchakin

CyberheistNews Vol 11 #45 [HEADS UP] Get Prepared for Sophisticated Black Friday Scams

 November 16, 2021     No comments   

New 'Frankenphishing' Tactic Combines Other Phishing Kits Into One

RiskIQ has observed another phishing kit that’s been pieced together from portions of other phishing kits.

“In early 2021, RiskIQ first detected a new phishing campaign targeting PayPal,” the researchers write. “The campaign, authored by an actor calling themself ‘Vagabon,’ looks to collect PayPal login credentials and complete credit card information from the victim.

The kit doesn't display many unique characteristics and is a textbook example of a ‘Frankenstein’ kit. In this increasingly popular trend, threat actors piece together new phish kits from modular, free, or readily available kits and services.”

The phishing kit is designed to trick victims into entering their PayPal information before redirecting them to the legitimate PayPal website.

“Following the initial PayPal username and password theft, the kit has a flow for further data theft, moving on to pages for account information and credit card data,” RiskIQ says. “Once the victim enters PayPal credentials, personal information, and credit card information, they redirect to the official PayPal website, which, to them, may seem like a perfectly legitimate place to end up.

The attacker will then receive a ‘VagabonSpam’ email containing all victim data points via the done[dot]php file.” The kit was apparently compiled from portions of code written by people who speak different languages.

“The Vagabon kit contains files written in four different languages: English, Spanish, French, and Arabic,” the researchers write. “Predominantly, files are English and Spanish or English and Arabic. However, some contain three or four languages, depending on the file function and the need to recall other foreign language files or functions.

The Vagabon kit, like many modern phish kits, contains code specific to blocking known research companies and common user agents. This code can be found within the .htaccess file as well as a bots.php file. The Vagabon PayPal kit will execute various processes, such as leveraging a user's IP geographic info to set the language and parameters for data validation as well as the exfiltration email address.”

Blog post with links:
https://blog.knowbe4.com/new-frankenphishing-tactic-combines-other-phishing-kits-into-one

Adblock test (Why?)


You may be interested in:
>> Is a Chromebook worth replacing a Windows laptop?
>> Find out in detail the outstanding features of Google Pixel 4a
>> Top 7 best earbuds you should not miss

Related Posts:
>> Recognizing 12 Basic Body Shapes To Choose Better Clothes
>>Ranking the 10 most used smart technology devices
>> Top 5+ Best E-readers: Compact & Convenient Pen
  • Share This:  
  •  Facebook
  •  Twitter
  •  Google+
  •  Stumble
  •  Digg
Email ThisBlogThis!Share to XShare to Facebook

Related Posts:

  • ...Fairmont Banff Springs Afternoon Tea (Rundle Lounge)Overall - 9/10.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.Food - 8/10Service - 9/10Ambiance - 9/10We made our annual getaway to Banff a… Read More
  • ...Diner Deluxe (Aspen Woods) CalgaryOverall - 7.5/10.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.Food - 7/10Service - 8/10Ambiance - 7.5/10I've always thought this, but I f… Read More
  • ...Mercato West (Calgary)Overall - 9/10.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.Food - 9.5/10Service - 9/10Ambiance - 9/10Ever since having o… Read More
  • ...Eden at the Rimrock Resort Hotel (Banff)Overall - 9.5/10.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.Food - 9.5/10Service - 9.5/10Ambiance - 9.5/10Over the past f… Read More
  • ...Sweet Potato ChiliIn the winter months nothing beats a nice hearty chili. This recipe uses diced sweet potato which adds a subtle sweetness that balances off the spicy … Read More
Newer Post Older Post Home

0 Comments:

Post a Comment


Copyright © 2025 Linchakin | Powered by Blogger
Design by Hardeep Asrani | Blogger Theme by NewBloggerThemes.com | Distributed By Gooyaabi Templates