P0x53

Security Researcher. Learning mode💡

[P0x53 @p0x53]

Check Out my new research - Surge of Fake FIFA World Cup Streaming Sites Targets Virtual Fans - https://t.co/2xz8f24k9v @zscaler
#FIFAWorldCup2022 #FIFAWorldCup #streaming #StreamingLive #infosecurity #malware #Phishing #scam

[P0x53 @p0x53]

@Ledtech3 @EKFiddle Yp, array for regular expression and also for exfil URL.

[P0x53 @p0x53]

Browser-in-the Browser (BITB), hard to detect #phishing is back, targeting Indian users by imitating as Indian Gov site in sextortion #scam. #infosec #bitb #hacking #cybersecurity
@BleepinComputer @TheHackersNews
https://t.co/j6KpzOKNDu

[P0x53 @p0x53]

@TheHackersNews https://t.co/cnDSvmlYSk

[P0x53 @p0x53]

Browser-in-the Browser Attack is recently pickedup again after good research by @mrd0x. I worked on same technique earlier related to Steam phishing. This attack is hard to detect if everything coded well. https://t.co/kOQVG84awP

[P0x53 @p0x53]

@mrd0x It's similar to this Steam phishing campaign I worked on - https://t.co/kOQVG84awP

[P0x53 @p0x53]

@JCyberSec_ @PhishFeed @WMCGInsights This is interesting, thanks for so much great Intel 👍

[P0x53 @p0x53]

@gwillem @500mk500 @AffableKraut @unmaskparasites @rootprivilege @xuy1202 No yet, but this sounds interesting.

[P0x53 @p0x53]

Interesting research on phishing kits and phishing-as-a-service #phishing #Microsoft

[Microsoft Threat Intelligence @MsftSecIntel]

New blog post: Comprehensive research into BulletProofLink, a large-scale phishing-as-a-service operation that enables many of the phishing campaigns that impact enterprises today https://t.co/DydCaltkF8

[P0x53 @p0x53]

@malwrhunterteam at least they are trying to be protected from XSS...Trim Trim

[P0x53 @p0x53]

@500mk500 Have you seen infection for this ?

[P0x53 @p0x53]

@OPPOMalaysia Can you please DM me ? Needs to connect with your security team asap.

[P0x53 @p0x53]

#skimmer Vs #scam redirection
Before anyone can make payment and benifit skimmer group, domain redirects to scam URLs. #scammer are winning this game here. 😂
#skimmer #malware #phishing #infosec

[P0x53 @p0x53]

New day, New #skimmer, New script...

[tike @tiketiketikeke]

以前faviconのExifにjsを仕込むWebスキミングの手口(https://t.co/gRQ5Cgzmv3)が明るみになりましたが、現在以下のURLに同種のファイルが配置されています。

mtndnsstatic[.]com/favicon.ico
static[.]mtndnsstatic[.]com/script.js

mtndnsstatic[.]com
159.69.209.43 AS24940 (Hetzner Online GmbH)

[P0x53 @p0x53]

@JCyberSec_ @unmaskparasites @malwrhunterteam @JCyberSec_ thanks for taking a look into this. Will let you know if find the PHP file.

[P0x53 @p0x53]

Seeing multiple Wordpress sites injected with this script. Seems like something is there in the PHP file mentioned in JS. Any idea guys?
https://t.co/ym2Qk84QX1
https://t.co/X0GtptnfMK[.]ke/wp-content/themes/node/assets/js/like.js
cc:@JCyberSec_ @unmaskparasites @malwrhunterteam

[P0x53 @p0x53]

Thank you @sansecio and @gwillem for Yubikey and this cool t-shirt. 🙂🙂

[P0x53 @p0x53]

Antibot application on #phishing domain toqn23mc[.]com
cc: @JCyberSec_ @illegalFawn @malwrhunterteam

[P0x53 @p0x53]

Seen #Twitter URL shortener used in a #ChaseBank email #phishing. Is this new trend or seen usually ??
Shortener- t[.]co/8rRN7yZgAY?amp=1&id=FFWHBJEqKs?trackingid=8kWaBvce&signature=newsletter
Redirected #phish- toqn23mc[.]com/r/T95uwcJ
@JCyberSec_ @illegalFawn @malwrhunterteam

[P0x53 @p0x53]

@sansecio @Yubico yeah, I can take one if possible 😄