Phishing
DATE | NAME | CATEGORY | SUBCATE | INFO |
24.4.25 | Darcula phishing-as-a-service | PHISHING | PHaaS | AI-Enabled Darcula-Suite Makes Phishing Kits More Accessible, Easier to Deploy |
23.4.25 | Phishing for Codes | PHISHING | PHISHING | Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows |
15.4.25 | Precision-Validated Phishing | PHISHING | PHISHING | The Rise of Precision-Validated Credential Theft: A New Challenge for Defenders |
13.4.25 | Tycoon2FA | PHISHING | Kit | Tycoon2FA New Evasion Technique for 2025 |
9.4.25 | VibeScamming | PHISHING | AI | VibeScamming — From Prompt to Phish: Benchmarking Popular AI Agents’ Resistance to the Dark Side |
2.4.25 | Lucid Phishing-as-a-Service | PHISHING | Platform | Lucid is a sophisticated Phishing-as-a-Service (PhAAS) platform operated by Chinese-speaking threat actors, targeting 169 entities across 88 countries globally. With 129 active instances and 1000+ registered domains, Lucid ranks among prominent PhAAS platforms, alongside Darcula and Lighthouse |
28.3.25 |
Morphing Meerkat | PHISHING | PHaaS | A Phishing Tale of DoH and DNS MX Abuse |
22.2.25 | Darcula phishing-as-a-service | PHISHING | PAAS | The Bleeding Edge of Phishing: darcula-suite 3.0 Enables DIY Phishing of Any Brand |
18.1.25 | Sneaky 2FA | PHISHING | PHISHING | Sneaky 2FA: exposing a new AiTM Phishing-as-a-Service |
18.1.25 | Star Blizzard | PHISHING | PHISHING | New Star Blizzard spear-phishing campaign targets WhatsApp accounts |
29.11.2024 |
PHISHING |
Trustwave SpiderLabs has been actively monitoring the rise of Phishing-as-a-Service (PaaS) platforms, which are increasingly popular among threat actors. |
||
1.11.24 |
Xiū Gǒu Phishing Kit | PHISHING | PHISHING KIT | Every Doggo Has Its Day: Unleashing the Xiū Gǒu Phishing Kit |
28.10.24 | Gophish Framework | PHISHING | CAMPAIGN | Threat actor abuses Gophish to deliver new PowerRAT and DCRAT |
2.8.24 | PHISHING | OneDrive Pastejacking: The crafty phishing and downloader campaign | ||
30.3.24 | Darcula | Phishing | PhaaS | Out of the shadows – ’darcula’ iMessage and RCS smishing attacks target USPS and global postal services |
28.3.22 | Phishing | Phishing/Malware/Vulenerebility |