Luke Leal

#strox runs an impressive #phishing op, #PHaaS, which removes barriers of entry into phishing. #strox will rent you everything but the domain. e.g bulletproof host, phishing page, & market to sell the phished logins, etc #cybersecurity #infosec #malware lukeleal.com/research/posts/…

Yeah it is...I get crawlers searching for the same file names, too.

fake louis bag just chilling on the table next to the joint crutch and emptied cigarette 😂 nice work!

"All the rumors, the human sacrifices, the Hell portal, the demons... it's all true" let us know where to go to enjoy the synths 🙂

What's the redacted domain name from $inter_domain that is being used to pull the SEO spam from? The sample I have looks like an older one and its domain isn't active anymore.

Great story! Sadly National Medical Enterprises failed upwards and is now known as Tenet Healthcare (THC) en.wikipedia.org/wiki/Tenet_…

@ViriBack I got a laugh out of this #malware vendor's reaction to a past tweet from you about finding a #Gomorrah #stealer C2 panel

It's still online =\ but at least Google hit it with the red page so that helps

#Arkei #Stealer malware C2 panel using a login page that mimics the #WordPress login page but is actually connected to the C2 panel's database. Used to evade detection so the panel can stay active on compromised websites for longer. #malware #cybersecurity #C2

who has the best ascii art? el zero or xbalti?

Isn't that how you get CS:GO from this Sierra published masterpiece?

I don't think they should be criminally prosecuted unless there is gross negligence and/or the telecom intentionally allowed the abuse.

#strox phishing pages also have the capability to steal #2FA OTP from victims (along with their email account, personal documents, etc - fullz)

This actor has made the barrier of entry even lower...they provide everything but the domain. They even have a market to sell the phished logins. Also they never directly provide the kits and they use a subscription model ($3/day, 10 day min). I'll drop a post on it later today.

Yeah they can still get fullz and also access to the email account associated with banking login (assuming victim submits this data).

#phishing operator #strox added a feature so their phishers can go to sleep and not have to be sit around waiting 24/7 for the phished #2FA #OTP codes due to the short time limit on using them 😂😂 #infosec #cybersecurity #malware

Twitter appeals are ridiculously one sided and a serious problem on this platform. It's extremely frustrating. Hope you win this one.

@glotcode Hi - is there any way to report malicious activity on some of the pastes you host?

My understanding is that those videos aren't eligible for Adsense payouts so not sure where the money goes to... 🤔

Thanks! I have more posts on skimmers that go more in depth on how they operate on ecommerce websites (both #javascript and #php based skimmers) lukeleal.com/research/tags/s…