Summary
Researchers from the Threat Intelligence Team at Horizon Information Systems (Horizon IS) have uncovered a sophisticated phishing campaign orchestrated by hackers leveraging the SniperDz Phishing-as-a-Service (PhaaS) platform. This campaign involves brand impersonation and browser hijacking to trick victims into providing sensitive information.
Key Findings:
- Brand Impersonation: The attackers mimic legitimate brands such as PayPal, Microsoft, and Apple to lure users into clicking on malicious links.
- Browser Hijacking: A unique JavaScript file is used to register browser push notifications with a recurring VAPID public key across multiple campaigns.
- PhaaS Ecosystem: SniperDz provides the infrastructure for phishing attacks, including tracking domains, landing pages, and redirect funnels.
Technical Details:
- Tracking Domains: win.feezossl[.]xyz and win.anababayala[.]com are used to track victim activity.
- Landing Pages: aff.bnaoswhye[.]shop is an additional phishing domain associated with the campaign.
- VAPID Public Key: BHR8bZ93X3YNBNQcN_dGRYtnWqdsJXR2bX
Read the full article at Cyber Security News
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
20
Contents
Ali NematiWritten by Ali
