PhishingKitTracker

Fellow #phishingkit hunters I've moving #PhishingKitTracker over to it's own dedicated Twitter Account @PhishKitTracker CC @PhishKitTracker on twitter if you find a #threatactoremail in #phishingkit Thanks, @neonprimetime twitter.com/neonprimetime/…

@JCyberSec_ @ActorExpose @Jouliok @andpalmier @ANeilan @nullcookies @ozuma5119 @phishunt_io @sysgoblin @dubstard Same here DM is always open, thanks 🙏

@PhishKitTracker @ActorExpose @Jouliok @andpalmier @ANeilan @nullcookies @ozuma5119 @phishunt_io @sysgoblin @dubstard This isn't goodbye but more of a shift in targeting. If you ever need anything feel free to DM me. I still regularly use your data so thanks for the hard work on the tracker over the last few years!

Hello fellow #phishingkit #phishing hunters. I have not been able to give the Phishing Kit Tracker (@PhishKitTracker) project the necessary time it requires & therefore have decided at this time to pause the project. Thank you for all your support throughout the years. 1/N

I will keep fighting the good fight with my @neonprimetime handle and am glad to be a small part in the greater #infosec community! 7/7

And for those still active and interested in #phishing #phishingkit #threatactoremail I recommend following some of the best phishing kit hunters in the business @ActorExpose @JCyberSec_ @actorexpose @SteveD3 6/N

KIT Intel is a tool for phishing kit research...at scale. 📁 Upload, Analyze, Cluster, and Research phishing kits like never before.

So you want to learn about phishing kits 🧑‍🎓 🧵 In this thread I will highlight threat hunting skills and IoCs within phishing kits to look for ⤵️ Retweets are appreciated ♻️ 🔍Follow me for more #phishing intelligence @Jcybersec_

@illegalFawn @malwrhunterteam @JAMESWT_MHT @Bank_Security @olihough86 @dubstard @YourAnonRiots @andsyn1 @douglasmun @SwiftOnSecurity This is a utoxic Office phishing kit. There should be 2 files on the root - License.txt maillist.txt The kit is complex with heavy obfuscation in place as well

@SteveD3 @Ledtech3 @MalwareJake @nullcookies @dyngnosis @olihough86 @dave_daves @n0p1shing @ANeilan @selenalarson Always pivot - The second email address 'ricadojerry' has been linked to a large number of phishing kits targeting Office, Yahoo, DHL, and Gmail. Can be seen here in the archived @PhishKitTracker run by @neonprimetime Linked tweet - twitter.com/PaulWebSec/sta…

What you think, why Gmail still does nothing about the 1000s of phished credentials going to skids' Gmail inboxes daily? A: They dgaf. B: 3 char agencies of US prefer searching in those inboxes when they want access to somewhere than compromising themselves. C: A+B.

@pizza_t_rex Just twitter cc @PhishKitTracker account with info in the tweet like url , drop email account , and VT link. I scrape and aggregate them and publicly share/document them all but have had only some small successes getting big names providers to confirm if they take action or not.

@PhishKitTracker I have scripts that parse phishing urls for kits. Is there a way I could notify you when I get one? Do you send takedown requests to the email providers?

@PhishKitTracker do you have software/scripts that pull information from kits?

Props to all who share #threatactoremail including ... @actorexpose @andpalmier @aneilan @cs0sf @marco_ramilli @neonprimetime @phishkittracker @phishunt_io @securereload @sysgoblin @jouliok to join the fun cc @PhishKitTracker & include exfil email & url in tweet 2/2

174 unique #threatactoremail added to @PhishKitTracker github since May 2020 100 @gmail (63%) 35 @yandexcom 21 @yahoo 7 @protonmail somebody with power at those email providers should #takethemdown ! github.com/neonprimetime/… 1/n