Campaign Leverages RFI Attacks to Deploy Phishing Kits

guest · Jul 30, 2019

Campaign Leverages RFI Attacks to Deploy Phishing Kits
A recently detected series of targeted attacks is attempting to exploit Remote File Inclusion (RFI) vulnerabilities to deploy phishing kits, Akamai has discovered
July 30, 2019
https://www.securityweek.com/campaign-leverages-rfi-attacks-deploy-phishing-kits

RFI attacks attempt to exploit unchecked or improperly validated inclusion functions within vulnerable applications or websites. Most of these attacks target PHP, but these vulnerabilities can also be found in Java, ASP, and elsewhere.

Once an RFI attack is successful, the server would deliver the content of the attacker-controlled externally-called file, and this is what was happening as part of the recently discovered attacks as well, Akamai’s Larry Cashdollar reveals.
RFI attacks, the security researcher explains, could also lead to code execution, Cross Site Scripting (XSS), Denial of Service (DoS), or sensitive information disclosure.

The use of RFI allows the attacker to remain undetected, as there are tools to scan for websites that could be vulnerable, record them to a list, and then work off that list, at a slow pace.
Click to expand...

Akamai: Criminals using targeted Remote File Inclusion attacks in phishing campaigns

Log in or Sign up

Campaign Leverages RFI Attacks to Deploy Phishing Kits

guest Guest

Log in or Sign up

Campaign Leverages RFI Attacks to Deploy Phishing Kits

guest Guest

Useful Searches