Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

‼️ A threat actor operating under the alias petrushka is selling a phishing-as-a-service (PhaaS) platform called Bluekit. The service offers 40+ phishing templates, Evilginx-based adversary-in-the-middle capabilities, 2FA bypass with geolocation and browser spoofing, antibot cloaking, cookie and credential harvesting, AI voice cloning, and bulletproof hosting with Monero payment support.

DarkWebInformer's profile picture

Dark Web Informer

222,920 subscribers

52,514 Aufrufe • vor 4 Monaten •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

‼️ PhishLab V1, a new phishing-as-a-service panel, is allegedly being sold on a hacking forum, marketed as undetected and capable of bypassing 2FA across major platforms. ⠀ ‣ Threat Actor: PHISHLAB ‣ Category: Phishing Kit / Malware-as-a-Service ‣ Product: PhishLab V1 ‣ Industry: Cybercrime / Credential Theft ⠀ The actor is advertising a phishing panel that captures credentials, 2FA codes, and session cookies in real time, with Telegram notifications and one-click cookie import. The kit targets banks, crypto exchanges, payment processors, retailers, and social platforms across more than 17 active modules with 10+ unique domains per module. Pricing is set at $759 first month and $250 monthly thereafter. ⠀ What's advertised: ⠀ ▪️ Real-time credential and 2FA capture ▪️ Telegram notifications on victim login ▪️ One-click cookie import for instant session takeover ▪️ Bypass for all 2FA types ▪️ 10+ unique domains per module with 24/7 updates ▪️ Crypto modules: OKX, Bybit, Binance, Coinbase ▪️ Banking modules: Chase, BoA, Wells Fargo, Citi ▪️ Payment modules: PayPal, Stripe (Venmo and Cash App in testing) ▪️ Shopping modules: Amazon, Walmart, eBay, Target ▪️ Social modules: Instagram, Facebook, WhatsApp, TikTok ▪️ 15+ additional modules in pending/testing phase
1:57

‼️ PhishLab V1, a new phishing-as-a-service panel, is allegedly being sold on a hacking forum, marketed as undetected and capable of bypassing 2FA across major platforms. ⠀ ‣ Threat Actor: PHISHLAB ‣ Category: Phishing Kit / Malware-as-a-Service ‣ Product: PhishLab V1 ‣ Industry: Cybercrime / Credential Theft ⠀ The actor is advertising a phishing panel that captures credentials, 2FA codes, and session cookies in real time, with Telegram notifications and one-click cookie import. The kit targets banks, crypto exchanges, payment processors, retailers, and social platforms across more than 17 active modules with 10+ unique domains per module. Pricing is set at $759 first month and $250 monthly thereafter. ⠀ What's advertised: ⠀ ▪️ Real-time credential and 2FA capture ▪️ Telegram notifications on victim login ▪️ One-click cookie import for instant session takeover ▪️ Bypass for all 2FA types ▪️ 10+ unique domains per module with 24/7 updates ▪️ Crypto modules: OKX, Bybit, Binance, Coinbase ▪️ Banking modules: Chase, BoA, Wells Fargo, Citi ▪️ Payment modules: PayPal, Stripe (Venmo and Cash App in testing) ▪️ Shopping modules: Amazon, Walmart, eBay, Target ▪️ Social modules: Instagram, Facebook, WhatsApp, TikTok ▪️ 15+ additional modules in pending/testing phase

Dark Web Informer

29,774 Aufrufe • vor 3 Monaten

‼️ A threat actor is selling a sophisticated phishing suite designed to mimic Ledger cryptocurrency wallet interfaces to steal seed phrases and credentials. The kit includes anti-detection features, keylogging capabilities, and Telegram integration for real-time notifications.
4:03

‼️ A threat actor is selling a sophisticated phishing suite designed to mimic Ledger cryptocurrency wallet interfaces to steal seed phrases and credentials. The kit includes anti-detection features, keylogging capabilities, and Telegram integration for real-time notifications.

Dark Web Informer

38,125 Aufrufe • vor 4 Monaten

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba
12:59

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

25,614 Aufrufe • vor 1 Monat

In this episode of the Microsoft Threat Intelligence Podcast, Principal Threat Intelligence Analyst Crane Hassold explores how phishing and social engineering attacks are evolving beyond email in the threat landscape. While email remains the primary attack vector, Microsoft is tracking a broader social engineering landscape that includes QR code phishing, CAPTCHA-gated phishing, Teams-based impersonation, and credential theft campaigns designed to reach users across business communication channels. As organizations adopt new ways of communicating, threat actors continue to adapt alongside them, targeting users through the platforms they trust and use every day. Hear more about practical defensive measures and how to reduce exposure to evolving threats in this episode. As the Microsoft Threat Intelligence Podcast enters a new season, we want to thank Sherrod DeGrippo for 3.5 years of expert insight, thoughtful conversations, and leadership as host. Listen to her farewell episode:
0:45

In this episode of the Microsoft Threat Intelligence Podcast, Principal Threat Intelligence Analyst Crane Hassold explores how phishing and social engineering attacks are evolving beyond email in the threat landscape. While email remains the primary attack vector, Microsoft is tracking a broader social engineering landscape that includes QR code phishing, CAPTCHA-gated phishing, Teams-based impersonation, and credential theft campaigns designed to reach users across business communication channels. As organizations adopt new ways of communicating, threat actors continue to adapt alongside them, targeting users through the platforms they trust and use every day. Hear more about practical defensive measures and how to reduce exposure to evolving threats in this episode. As the Microsoft Threat Intelligence Podcast enters a new season, we want to thank Sherrod DeGrippo for 3.5 years of expert insight, thoughtful conversations, and leadership as host. Listen to her farewell episode:

Microsoft Threat Intelligence

10,237 Aufrufe • vor 17 Tagen

"Criminal organizations are entering cybersecurity because they're now able to use AI tools as a service."— Francis DeSouza, COO and President of Security Products, Google Cloud breaks down the new era of agentic attacks, deepfake phishing, and model poisoning. Catch Patrick Moorhead and Google's Francis DeSouza talking about the threat landscape nobody is fully ready for.
1:06

"Criminal organizations are entering cybersecurity because they're now able to use AI tools as a service."— Francis DeSouza, COO and President of Security Products, Google Cloud breaks down the new era of agentic attacks, deepfake phishing, and model poisoning. Catch Patrick Moorhead and Google's Francis DeSouza talking about the threat landscape nobody is fully ready for.

Six Five Media

60,532 Aufrufe • vor 3 Monaten

Lots of new faces! I believe a reintroduction is in order. I am Nycto, The Celestial Undead of the Violet and Gold Congregation. Voice actor, Musician, and Calcium Companion with a love for souls-likes, horror, and strategies. At your service. 📿
0:24

Lots of new faces! I believe a reintroduction is in order. I am Nycto, The Celestial Undead of the Violet and Gold Congregation. Voice actor, Musician, and Calcium Companion with a love for souls-likes, horror, and strategies. At your service. 📿

Nycto📿Celestial Horror

28,760 Aufrufe • vor 4 Monaten

An unhinged liberal storms into a church in the middle of service, yelling at people as they try to worship. He repeatedly shouts, “stand with the Somalis, stand with the Latinos,” disrupting the entire service and confronting churchgoers as they exit. This man belongs in a mental institution
1:40

An unhinged liberal storms into a church in the middle of service, yelling at people as they try to worship. He repeatedly shouts, “stand with the Somalis, stand with the Latinos,” disrupting the entire service and confronting churchgoers as they exit. This man belongs in a mental institution

Clown World ™ 🤡

770,575 Aufrufe • vor 7 Monaten

‼️ A threat actor is advertising a “ClickFix” payload delivery method that allegedly stores malware within browser cache to evade detection and bypass EDR, claiming it avoids suspicious web requests and executes via disguised commands in File Explorer. The offer includes source code, a builder, setup instructions, and a template (priced at $300), with optional custom template rewrites for an additional $200.
0:35

‼️ A threat actor is advertising a “ClickFix” payload delivery method that allegedly stores malware within browser cache to evade detection and bypass EDR, claiming it avoids suspicious web requests and executes via disguised commands in File Explorer. The offer includes source code, a builder, setup instructions, and a template (priced at $300), with optional custom template rewrites for an additional $200.

Dark Web Informer

23,376 Aufrufe • vor 6 Monaten

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟
0:33

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

34,248 Aufrufe • vor 2 Monaten

Let's talk cybersecurity in the AI age. We explore how GenAI is transforming the fight against cyber threats with our very own Kedar Dhuru and Bob Friday. From phishing prevention to quantum cryptography, this is a must-listen. Tune in:
0:36

Let's talk cybersecurity in the AI age. We explore how GenAI is transforming the fight against cyber threats with our very own Kedar Dhuru and Bob Friday. From phishing prevention to quantum cryptography, this is a must-listen. Tune in:

HPE Networking

417,399 Aufrufe • vor 1 Jahr

‼️ A threat actor is allegedly selling a PDF Exploit Builder advertised as 100% FUD with unlimited builds on a popular cybercrime forum, with tiered licenses starting at $300. ⠀ ‣ Threat Actor: TheStrain ‣ Category: Illicit Service / Malware Builder ‣ Victim: Adobe Acrobat Reader, Foxit Reader (delivery vector) ‣ Industry: Malware / Exploit Tooling ⠀ The actor pitches the builder as reliable, effective, FUD, and stable, capable of bundling EXE and JAR payloads inside weaponized PDF files. They claim it supports all versions of Adobe Acrobat Reader and Foxit Reader and bypasses all forms of security. ⠀ What's offered: ⠀ ▪️ Unlimited builds ▪️ EXE and JAR payload support ▪️ Compatibility with all versions of Adobe Acrobat Reader and Foxit Reader ▪️ Claimed bypass of all forms of security ▪️ 100% FUD claim ⠀ Pricing: ⠀ ▪️ 1 Month License: $300 ▪️ 3 Months License: $500 ▪️ Lifetime License: $1,500
6:23

‼️ A threat actor is allegedly selling a PDF Exploit Builder advertised as 100% FUD with unlimited builds on a popular cybercrime forum, with tiered licenses starting at $300. ⠀ ‣ Threat Actor: TheStrain ‣ Category: Illicit Service / Malware Builder ‣ Victim: Adobe Acrobat Reader, Foxit Reader (delivery vector) ‣ Industry: Malware / Exploit Tooling ⠀ The actor pitches the builder as reliable, effective, FUD, and stable, capable of bundling EXE and JAR payloads inside weaponized PDF files. They claim it supports all versions of Adobe Acrobat Reader and Foxit Reader and bypasses all forms of security. ⠀ What's offered: ⠀ ▪️ Unlimited builds ▪️ EXE and JAR payload support ▪️ Compatibility with all versions of Adobe Acrobat Reader and Foxit Reader ▪️ Claimed bypass of all forms of security ▪️ 100% FUD claim ⠀ Pricing: ⠀ ▪️ 1 Month License: $300 ▪️ 3 Months License: $500 ▪️ Lifetime License: $1,500

Dark Web Informer

47,108 Aufrufe • vor 4 Monaten

Nepal Government envisions a cashless society and a Digital Nepal BUT Every interbank transaction comes with an additional cost of NPR 11.3!!!! NPR 10 as a service charge and NPR 1.3 as VAT! This is completely unfair and works against the interests of the general public, especially small and medium businesses. We demand the cancellation of the Vat and Service Charge in digital Payment. CANCEL 11.3!!!! #digitalpayment #ExtraVatandServiceFee #CANCEL11point3
2:13

Nepal Government envisions a cashless society and a Digital Nepal BUT Every interbank transaction comes with an additional cost of NPR 11.3!!!! NPR 10 as a service charge and NPR 1.3 as VAT! This is completely unfair and works against the interests of the general public, especially small and medium businesses. We demand the cancellation of the Vat and Service Charge in digital Payment. CANCEL 11.3!!!! #digitalpayment #ExtraVatandServiceFee #CANCEL11point3

Ranju Darshana

24,149 Aufrufe • vor 1 Jahr

‼️A threat actor is advertising "Atroposia RAT," an advanced Remote Access Trojan built in C++/Rust with multifunctional capabilities, showing 9,995 clients online. Features include HVNC (Hidden VNC), stealer, vulnerability scanner, grabber, file manager, HRDP (Hidden RDP), mass execute, DNS hijack, clipboard manager, credential recovery from Chromium and Gecko browsers, crypto wallet theft, UAC bypass, and anti-CIS execution blocking (blocks in Russia, Ukraine, Belarus, Kazakhstan, etc.). The RAT offers encrypted communication, unique stubs, native executables, mutation options, persistence mechanisms, and a full C2 console with modular architecture. Pricing: $200/month | $500/3 months | $900/6 months | $1,500/year | $3,200/lifetime.
2:58

‼️A threat actor is advertising "Atroposia RAT," an advanced Remote Access Trojan built in C++/Rust with multifunctional capabilities, showing 9,995 clients online. Features include HVNC (Hidden VNC), stealer, vulnerability scanner, grabber, file manager, HRDP (Hidden RDP), mass execute, DNS hijack, clipboard manager, credential recovery from Chromium and Gecko browsers, crypto wallet theft, UAC bypass, and anti-CIS execution blocking (blocks in Russia, Ukraine, Belarus, Kazakhstan, etc.). The RAT offers encrypted communication, unique stubs, native executables, mutation options, persistence mechanisms, and a full C2 console with modular architecture. Pricing: $200/month | $500/3 months | $900/6 months | $1,500/year | $3,200/lifetime.

Dark Web Informer

40,858 Aufrufe • vor 5 Monaten

Imagine sitting in a Baptist church during a Palm Sunday service — and the next minute, you’re hiding under the pews. This is what russian terrorism looks like. And this is the consequence of negotiating with terrorists.
0:40

Imagine sitting in a Baptist church during a Palm Sunday service — and the next minute, you’re hiding under the pews. This is what russian terrorism looks like. And this is the consequence of negotiating with terrorists.

Roman Sheremeta 🇺🇸🇺🇦

27,972 Aufrufe • vor 1 Jahr

The King has paid a visit to a The Gate Charity in Scotland that offers support to those affected by homelessness and food insecurity. King Charles met volunteers and representatives of local charities who have been presented with awards for Voluntary Service.
8:47

The King has paid a visit to a The Gate Charity in Scotland that offers support to those affected by homelessness and food insecurity. King Charles met volunteers and representatives of local charities who have been presented with awards for Voluntary Service.

The Royal Family Channel

63,340 Aufrufe • vor 1 Jahr

Between factories and homes, Shanghai-based AGIBOT Robotics is deploying the AGIBOT A2 in large quantities in commercial service scenarios, such as shopping malls, showrooms, and auto dealerships. They mass-produced 1,000 units earlier this year and plan to produce 5,000 this year. The A2 is a full-sized humanoid robot powered by local AI and equipped with emotional interaction capabilities to provide user-friendly interactive services.
3:29

Between factories and homes, Shanghai-based AGIBOT Robotics is deploying the AGIBOT A2 in large quantities in commercial service scenarios, such as shopping malls, showrooms, and auto dealerships. They mass-produced 1,000 units earlier this year and plan to produce 5,000 this year. The A2 is a full-sized humanoid robot powered by local AI and equipped with emotional interaction capabilities to provide user-friendly interactive services.

CyberRobo

100,999 Aufrufe • vor 1 Jahr

ChatGPT, AutoGPT and AgentGPT are in trouble. just changed the game with its new AI capabilities. Introducing AIAgent - A web based automateGPT that is different in a really good way:
0:29

ChatGPT, AutoGPT and AgentGPT are in trouble. just changed the game with its new AI capabilities. Introducing AIAgent - A web based automateGPT that is different in a really good way:

Hasan Toor

391,162 Aufrufe • vor 3 Jahren