Your data, stolen twice: Pirated phishing kit contains hidden backdoor

guest · May 21, 2019

Your data, stolen twice: Pirated phishing kit contains hidden backdoor
May 21, 2019
https://www.techrepublic.com/articl...irated-phishing-kit-contains-hidden-backdoor/

16Shop, a phishing package that targets Apple users, is "highly sophisticated," according to findings from cloud service provider Akamai, published Tuesday. "It has layered defenses, as well as attack mechanisms, all constructed neatly within hundreds of files. It's a true multi-level kit, running different stages for different brands, depending on the information the victim provides. [...]"

For the pirated version of 16Shop, the harvested credentials and credit card information is also transmitted using an obfuscated backchannel, sending data to the group that cracked 16Shop via Telegram [...]

"At first glance, 16Shop's landing page looks exactly like Apple's legitimate one, but there are tiny differences that humans can be trained to spot," Akamai noted. "There are font differences, the URL, even the fact that in some iterations of 16Shop, the victim is prompted to enter a username and password into the same form, something Apple doesn't do."
Click to expand...

Log in or Sign up

Your data, stolen twice: Pirated phishing kit contains hidden backdoor

guest Guest

Log in or Sign up

Your data, stolen twice: Pirated phishing kit contains hidden backdoor

guest Guest

Useful Searches