OSINT | Threat Intel | Antifraud | DevOps
Joined May 2022
- Tweets295
- Following502
- Followers610
- Likes123
Pinned Tweet
1/
Almost every phishing campaign starts the same way: a lookalike domain impersonating a major global brand. Same big names, over and over.
In the casework I handle: 99% of everything I analyze.
So I built something to attack exactly that. It's free. 🧵
6/7
What I can’t place is the actor’s objective. Only the victim gets the code. So either someone later asks the user to forward it (social engineering), or the code is irrelevant: harassment, noise, or number enumeration. So far no one has asked for a code.
Two updates on PhishZero.
- Registration open to everyone via Auth0.
- Free Domain Lookup. Enter a domain, see if I have already detected a lookalike against it. Zero setup.
Detection happens between certificate issuance and campaign launch, real-time.
phishzero.sicuranext.com
osint_matter retweeted
PhishZero by SicuraNext — See the phish before the first click. phishzero.sicuranext.com/
6/
No paywall. No AI hallucinating IoCs. Just detection logic I run in production every day.
Feed and docs: phishzero.sicuranext.com/
DMs open if you work on lookalike detection and want to compare notes.
I'm back. Tomorrow I'm gonna release online the most important project I've made so far, more than one year of development, possibly a game changer in the fight against #phishing.
And most important: completely free.
I really hope you gonna appreciate it 🖤
Last week I introduced the #Clickfix attack, this time I go deeper into how far it has already spread: 3,153 Ghost sites scanned , 287 already compromised, and most owners have no idea.
blog.sicuranext.com/ghost-st…
Users trust is a bug and there is no fix.
#ClickFix is becoming one of the most effective #phishing techniques around, and I've been running into frontier cases of it in the wild.
blog.sicuranext.com/one-past…
