#LogoKit - Twitter Hashtag

8 months ago

🚨 That "DocuSign notification" in your inbox? It might be a sophisticated #phishing attack. Group-IB experts have identified a growing wave of DocuSign impersonation attacks using #LogoKit a phishing framework that dynamically loads your organization's branding to create highly convincing fake login pages. The email looks legitimate. The page looks like yours. But it's designed to steal credentials. Our latest Email Protection Spotlight reveals how this attack works and how Group-IB's #BusinessEmailProtection stops the growing wave of #DocuSign impersonation before users are exposed. Protect your organization. Read the full story: https://t.co/8uDDsKTw15

GroupIB's tweet photo. 🚨 That "DocuSign notification" in your inbox? It might be a sophisticated #phishing attack.

Group-IB experts have identified a growing wave of DocuSign impersonation attacks using #LogoKit a phishing framework that dynamically loads your organization's branding to create highly convincing fake login pages.

The email looks legitimate. The page looks like yours. But it's designed to steal credentials.

Our latest Email Protection Spotlight reveals how this attack works and how Group-IB's #BusinessEmailProtection stops the growing wave of #DocuSign impersonation before users are exposed.

Protect your organization. Read the full story: https://t.co/8uDDsKTw15

0

6

2

749

CRIL (Cyble Research and Intelligence Labs) @CybleInsights

about 1 year ago

CRIL analyzes an ongoing LogoKit phishing campaign that pulls brand assets from Clearbit and Google Favicon. https://t.co/HkhBWxNRCe #CredentialTheft #BrandMonitoring #Phishing #SocialEngineering #LogoKit #ThreatIntel

0

2

1

0

297

ANY.RUN

@anyrun_app

over 1 year ago

🚨 From abuse of #Azure Blob Storage and #OneDrive to #LogoKit #phishing and #Lumma campaign targeting manufacturing companies Check out in-depth analysis of the biggest #cyberattacks in December 2024 ⬇️ https://t.co/BQ2VlKHWVa

0

30

7

4K

ANY.RUN

@anyrun_app

almost 2 years ago

🎯 Analysis of the latest LogoKit #phishkit – #ExploreWithANYRUN ⚠️ #LogoKit is a comprehensive set of phishing kits, known for using services that provide company logos and screenshots of target websites ➡️ The background is retrieved via request to a website screenshot service, using the following template: hxxps://thum[.]io/get/width/<DPI>/https://<Domain> ➡️ The company's logo is fetched from a legitimate logo storage service: hxxps://logo.clearbit[.]com/<Domain> Example: https://t.co/tnjZiMbIYj 📌 The domain chain is led by a decoder-redirector: hxxps:// asiangrocers [.]store/fri/?haooauvpco=bWlubmllQGRpc25leS5jb20 It is a fake Asian food store website built on a #WordPress template, with a domain age of around four years. The template contains email addresses filled with typos 🔄 The decoder-redirector shields the page from analysis and redirects the victim to the actual #phishing page In this case, the real content of the #phish page and the associated scripts are hosted on the #Cloudflare Pages platform. They are stored in the assets/ folder, which contains styles, images, and scripts 🚨 Three scripts with random 10-character names are designed to protect the page from analysis and send stolen data to the threat actors: assets/js/e0nt7h8uiw[.]js assets/js/vddq2ozyod[.]js assets/js/j3046eqymn[.]js The stolen authentication data is sent to a remote Command and Control (#C2) server controlled by the attackers via an HTTP POST request containing the following parameters: fox=<E-mail>&con=<Password> 👨‍💻 Take a look at another sandbox session: https://t.co/WhBetsYmGM 🚀 Hurry up to get #ANYRUN's Black Friday deals: get a license bundle, double your TI Lookup search requests, or get a custom offer 🔗 https://t.co/6a0jqsxDGS

0

15

6

4

3K

Md Nishad Molla @DesignerNishad

almost 2 years ago

Cosmetics Logo Design . 🔴 Contact us if you need AWESOME LOGO / BRANDING DESIGN!! 📱Whatsapp Me:+8801608684359 📧Email:[email protected] . . #logodesign #logodesigner #logodesigns #logodesigners #logodesigning #logokit #brandkitdesign #designernishad

1

5

0

70

Putnam Marketing @PutnamMarketing

over 3 years ago

Brand Board Templates. All templates are fully customizable using Canva. Edit the colors, fonts, & images to match your branding. https://t.co/IpIEwtvrDZ #DIYBrandingPackage #LogoKit #BusinessLogo #Template #Editable #BrandBoard #DIY #LogoDesign #LogoMaker #LogoDesign

0

2

1

0

273

Threat Intelligence @threatintel

about 4 years ago

#ThreatProtection #Phishing landscape sees a #LogoKit activity increase. Read more about Symantec's protection: https://t.co/2EF4TYUrdw #Spam #Cybercrime #Cybersecurity

0

3

4

0

twelvesec @twelvesec

about 4 years ago

#Hackers managed to exploit Open Redirect #vulnerabilities to conduct #LogoKit #phishing campaigns. #CyberSecurity #infosec #cybercrime https://t.co/5WKstWj3QG

twelvesec's tweet photo. #Hackers managed to exploit Open Redirect #vulnerabilities to conduct #LogoKit #phishing campaigns.
#CyberSecurity #infosec #cybercrime
https://t.co/5WKstWj3QG https://t.co/nvd6khtPrC

0

2

1

0

Vault Security 🍃 @VaulterVS

about 4 years ago

Hackers Exploit Open Redirect Vulnerabilities to Conduct LogoKit Phishing Campaigns. https://t.co/QxjwFo8rSG #hackers #infosec #cybersecurity #vulnerability #exploit #logokit

0

2

0

Pierluigi Paganini - Security Affairs @securityaffairs

about 4 years ago

@RESecurity #LogoKit update – The #phishing kit leveraging Open Redirect Vulnerabilities https://t.co/EuUkzaJCY9 #securityaffairs #hacking

0

2

1

0

Will @BushidoToken

over 4 years ago

#Phishing recently w/ storageapi[.]fleek[.]co Some BoA-themed docs, what looks to be #LogoKit, a generic login page, plus O365 https://t.co/57lBJkShHj

BushidoToken's tweet photo. #Phishing recently w/ storageapi[.]fleek[.]co

Some BoA-themed docs, what looks to be #LogoKit, a generic login page, plus O365

https://t.co/57lBJkShHj https://t.co/DiyxwV0jYq

0

3

2

0

Will @BushidoToken

over 4 years ago

#LogoKit #Phishing campaign is back 🔎Append any Email address to the end of the URL and the Logo appears outlook-mail-authentication[.]web[.]app (https://t.co/faV6ngHCGx is owned by @Firebase) https://t.co/Z1HKpWzr4c cc @RiskIQ @SteveD3 @JCyberSec_

1

7

1

0

Will @BushidoToken

over 4 years ago

@LizJocelyne Thank you for the info, just as a I suspected this is likely the same gang/group/operators of a campaign tracked by @RiskIQ as #LogoKit the hostname websites these kits are hosted on are almost identical

1

3

0

Szabolcs Schmidt

@smica83

over 5 years ago

"Messages delayed" #phishing with #LogoKit URL(https): /web-host.live/home/index.html @urlscanio https://t.co/JO9VegnaA1 @Hostwinds @malwrhunterteam @Spam404 @PhishStats @ActorExpose

smica83's tweet photo. "Messages delayed" #phishing with #LogoKit
URL(https): /web-host.live/home/index.html
@urlscanio https://t.co/JO9VegnaA1
@Hostwinds @malwrhunterteam @Spam404 @PhishStats @ActorExpose https://t.co/7stTeyWVKM

0

3

1

0

RiskIQ @RiskIQ

over 5 years ago

ICYMI: RiskIQ's @SEGinty recently joined the @thecyberwire to talk about #LogoKit, a pervasive #phishing tool that enables even novice threat actors to executive effective campaigns: https://t.co/LehIJDNBTG

0

2

1

0

RiskIQ @RiskIQ

over 5 years ago

RiskIQ's @SEGinty recently joined the @thecyberwire to talk about #LogoKit, a pervasive #phishing tool that enables even novice threat actors to executive effective campaigns: https://t.co/tQKtjNrnRq

0

5

3

0

RiskIQ @RiskIQ

over 5 years ago

The business of #crimeware: RiskIQ researchers analyze a thriving #phishing economy and the expert marketers behind the sale of #LogoKit, a simple, modularized, and adaptable phish kit running on thousands of domains: https://t.co/EjjMsISlSv

0

2

0

RiskIQ @RiskIQ

over 5 years ago

Via @DarkReading, find out what makes the #LogoKit #phishing kit ingenious in its simplicity and a valuable tool for threat actors of all skill levels: https://t.co/p53SZhcyvZ

0

2

1

0

Szabolcs Schmidt

@smica83

over 5 years ago

#phishing with #LogoKit URL(https): /institutoaxioma.com.ar/ #(emailaddress) URL(http): /email25.godaddy.com-sign-realm.getforge.io/ #(emailaddress) @urlscanio https://t.co/VIFcdjGESF @Spam404 @101domain @malwrhunterteam @illegalFawn