正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

‼️ A threat actor operating under the alias petrushka is selling a phishing-as-a-service (PhaaS) platform called Bluekit. The service offers 40+ phishing templates, Evilginx-based adversary-in-the-middle capabilities, 2FA bypass with geolocation and browser spoofing, antibot cloaking, cookie and credential harvesting, AI voice cloning, and bulletproof hosting with Monero payment support.

Dark Web Informer

215,030 subscribers

51,721 次观看 • 2 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

🚨Darcula Phishing-as-a-Service (PhaaS) Platform Integrates Generative AI, Lowering the Barrier for Threat Actors

🚨Darcula Phishing-as-a-Service (PhaaS) Platform Integrates Generative AI, Lowering the Barrier for Threat Actors

Dark Web Informer

61,991 次观看 • 1 年前

‼️ PhishLab V1, a new phishing-as-a-service panel, is allegedly being sold on a hacking forum, marketed as undetected and capable of bypassing 2FA across major platforms. ⠀ ‣ Threat Actor: PHISHLAB ‣ Category: Phishing Kit / Malware-as-a-Service ‣ Product: PhishLab V1 ‣ Industry: Cybercrime / Credential Theft ⠀ The actor is advertising a phishing panel that captures credentials, 2FA codes, and session cookies in real time, with Telegram notifications and one-click cookie import. The kit targets banks, crypto exchanges, payment processors, retailers, and social platforms across more than 17 active modules with 10+ unique domains per module. Pricing is set at $759 first month and $250 monthly thereafter. ⠀ What's advertised: ⠀ ▪️ Real-time credential and 2FA capture ▪️ Telegram notifications on victim login ▪️ One-click cookie import for instant session takeover ▪️ Bypass for all 2FA types ▪️ 10+ unique domains per module with 24/7 updates ▪️ Crypto modules: OKX, Bybit, Binance, Coinbase ▪️ Banking modules: Chase, BoA, Wells Fargo, Citi ▪️ Payment modules: PayPal, Stripe (Venmo and Cash App in testing) ▪️ Shopping modules: Amazon, Walmart, eBay, Target ▪️ Social modules: Instagram, Facebook, WhatsApp, TikTok ▪️ 15+ additional modules in pending/testing phase

‼️ PhishLab V1, a new phishing-as-a-service panel, is allegedly being sold on a hacking forum, marketed as undetected and capable of bypassing 2FA across major platforms. ⠀ ‣ Threat Actor: PHISHLAB ‣ Category: Phishing Kit / Malware-as-a-Service ‣ Product: PhishLab V1 ‣ Industry: Cybercrime / Credential Theft ⠀ The actor is advertising a phishing panel that captures credentials, 2FA codes, and session cookies in real time, with Telegram notifications and one-click cookie import. The kit targets banks, crypto exchanges, payment processors, retailers, and social platforms across more than 17 active modules with 10+ unique domains per module. Pricing is set at $759 first month and $250 monthly thereafter. ⠀ What's advertised: ⠀ ▪️ Real-time credential and 2FA capture ▪️ Telegram notifications on victim login ▪️ One-click cookie import for instant session takeover ▪️ Bypass for all 2FA types ▪️ 10+ unique domains per module with 24/7 updates ▪️ Crypto modules: OKX, Bybit, Binance, Coinbase ▪️ Banking modules: Chase, BoA, Wells Fargo, Citi ▪️ Payment modules: PayPal, Stripe (Venmo and Cash App in testing) ▪️ Shopping modules: Amazon, Walmart, eBay, Target ▪️ Social modules: Instagram, Facebook, WhatsApp, TikTok ▪️ 15+ additional modules in pending/testing phase

Dark Web Informer

29,774 次观看 • 2 个月前

‼️ A threat actor is selling a sophisticated phishing suite designed to mimic Ledger cryptocurrency wallet interfaces to steal seed phrases and credentials. The kit includes anti-detection features, keylogging capabilities, and Telegram integration for real-time notifications.

‼️ A threat actor is selling a sophisticated phishing suite designed to mimic Ledger cryptocurrency wallet interfaces to steal seed phrases and credentials. The kit includes anti-detection features, keylogging capabilities, and Telegram integration for real-time notifications.

Dark Web Informer

38,125 次观看 • 3 个月前

🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥 💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session. P.S. Enjoy that Cyberpunk tune I made 🎵

🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥 💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session. P.S. Enjoy that Cyberpunk tune I made 🎵

Kuba Gretzky

75,490 次观看 • 2 年前

Okta chained with Azure with auto MFA subscription for Okta and frame-buster bypass to perform Bitb ! Evilginx is really nice to setup custom phishing campaign whatever the environment is... Phishlet available here :

Okta chained with Azure with auto MFA subscription for Okta and frame-buster bypass to perform Bitb ! Evilginx is really nice to setup custom phishing campaign whatever the environment is... Phishlet available here :

OtterHacker

42,029 次观看 • 1 年前

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:

Evilginx Pro phishing framework for red teams is launching in just 5 days! 😲 Here is a short demonstration of how easy it is to deploy a new phishing server, without ever leaving your terminal window. Learn more about Evilginx Pro here:

Kuba Gretzky

20,423 次观看 • 1 年前

"Criminal organizations are entering cybersecurity because they're now able to use AI tools as a service."— Francis DeSouza, COO and President of Security Products, Google Cloud breaks down the new era of agentic attacks, deepfake phishing, and model poisoning. Catch Patrick Moorhead and Google's Francis DeSouza talking about the threat landscape nobody is fully ready for.

"Criminal organizations are entering cybersecurity because they're now able to use AI tools as a service."— Francis DeSouza, COO and President of Security Products, Google Cloud breaks down the new era of agentic attacks, deepfake phishing, and model poisoning. Catch Patrick Moorhead and Google's Francis DeSouza talking about the threat landscape nobody is fully ready for.

Six Five Media

60,532 次观看 • 2 个月前

YC F24's Rulebase builds AI-driven fraud detection models to prevent account takeovers and voice phishing for fintechs and banks. They also run voice phishing simulations to train employees against bad actors. Congrats on the launch, Gideon + chidi!

YC F24's Rulebase builds AI-driven fraud detection models to prevent account takeovers and voice phishing for fintechs and banks. They also run voice phishing simulations to train employees against bad actors. Congrats on the launch, Gideon + chidi!

Y Combinator

43,986 次观看 • 1 年前

Drivers in the UK are being targeted with fake DVLA texts claiming a vehicle tax payment failed. The link leads to a phishing site built to steal your personal or banking info. Watch the signs and protect your data!

Drivers in the UK are being targeted with fake DVLA texts claiming a vehicle tax payment failed. The link leads to a phishing site built to steal your personal or banking info. Watch the signs and protect your data!

Bitdefender

1,898,356 次观看 • 8 个月前

An unhinged liberal storms into a church in the middle of service, yelling at people as they try to worship. He repeatedly shouts, “stand with the Somalis, stand with the Latinos,” disrupting the entire service and confronting churchgoers as they exit. This man belongs in a mental institution

An unhinged liberal storms into a church in the middle of service, yelling at people as they try to worship. He repeatedly shouts, “stand with the Somalis, stand with the Latinos,” disrupting the entire service and confronting churchgoers as they exit. This man belongs in a mental institution

Clown World ™ 🤡

770,450 次观看 • 5 个月前

‼️ A threat actor is advertising a “ClickFix” payload delivery method that allegedly stores malware within browser cache to evade detection and bypass EDR, claiming it avoids suspicious web requests and executes via disguised commands in File Explorer. The offer includes source code, a builder, setup instructions, and a template (priced at $300), with optional custom template rewrites for an additional $200.

‼️ A threat actor is advertising a “ClickFix” payload delivery method that allegedly stores malware within browser cache to evade detection and bypass EDR, claiming it avoids suspicious web requests and executes via disguised commands in File Explorer. The offer includes source code, a builder, setup instructions, and a template (priced at $300), with optional custom template rewrites for an additional $200.

Dark Web Informer

23,376 次观看 • 4 个月前

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

I'm currently working on reviving the OG social engineering technique for phishing attacks to be natively supported in Evilginx Pro. The Browser-in-the-Browser (BITB) technique (pioneered by mr.d0x) is making a well-deserved comeback soon. - Displays a fake OS pop-up window with the phishing page rendered within. 🖼️ - Customisable URL in the pop-up window's address bar to spoof the legitimate domain. 🔗 - Rendered pop-up window supports moving and resizing. ↔️ - Evades IFraming protections. 🔓 - Auto-detects Windows & macOS (light/dark modes) to make the pop-up window match the visitor's OS theme. 🎨 - Displays any web page in the background to support your social engineering pretext. 🖌️ I will soon release a full-length demo video to demonstrate how it works. For the time being, enjoy the sneak peek of BITB paired with the latest Google phishlet using Phishlets 2.0. Made exclusively for vetted cybersecurity professionals. Coming soon to Evilginx Pro. 🪝🐟

Kuba Gretzky

33,847 次观看 • 13 天前

Let's talk cybersecurity in the AI age. We explore how GenAI is transforming the fight against cyber threats with our very own Kedar Dhuru and Bob Friday. From phishing prevention to quantum cryptography, this is a must-listen. Tune in:

Let's talk cybersecurity in the AI age. We explore how GenAI is transforming the fight against cyber threats with our very own Kedar Dhuru and Bob Friday. From phishing prevention to quantum cryptography, this is a must-listen. Tune in:

HPE Networking

417,399 次观看 • 1 年前

Introducing the next Immunefi Magnus partner: ChainPatrol.com ⚡️ They're bringing real-time monitoring, threat detection, and takedown to Magnus — giving protocols the ability to detect, respond to, and neutralize threats as they emerge. “ChainPatrol is on a mission to make the Internet safer. We believe in open collaboration in web3 Security, and we’re excited to partner with Immunefi to deliver real-time monitoring, threat detection, and phishing takedowns directly from the Magnus platform.” — Nikita Varabei, CEO, ChainPatrol Details in this 🧵👇

Introducing the next Immunefi Magnus partner: ChainPatrol.com ⚡️ They're bringing real-time monitoring, threat detection, and takedown to Magnus — giving protocols the ability to detect, respond to, and neutralize threats as they emerge. “ChainPatrol is on a mission to make the Internet safer. We believe in open collaboration in web3 Security, and we’re excited to partner with Immunefi to deliver real-time monitoring, threat detection, and phishing takedowns directly from the Magnus platform.” — Nikita Varabei, CEO, ChainPatrol Details in this 🧵👇

Immunefi

16,298 次观看 • 1 年前

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

🚨 Evilginx Pro release is coming soon 🔥 I've just finished rewriting Evilpuppet to prepare it for release. Here is a demo of how it allows red teams to bypass Google's modern anti-phishing protections. 🪝🐟 ⏰ Get 20% OFF Evilginx Mastery course:

Kuba Gretzky

43,841 次观看 • 2 年前

‼️ A threat actor is allegedly selling a PDF Exploit Builder advertised as 100% FUD with unlimited builds on a popular cybercrime forum, with tiered licenses starting at $300. ⠀ ‣ Threat Actor: TheStrain ‣ Category: Illicit Service / Malware Builder ‣ Victim: Adobe Acrobat Reader, Foxit Reader (delivery vector) ‣ Industry: Malware / Exploit Tooling ⠀ The actor pitches the builder as reliable, effective, FUD, and stable, capable of bundling EXE and JAR payloads inside weaponized PDF files. They claim it supports all versions of Adobe Acrobat Reader and Foxit Reader and bypasses all forms of security. ⠀ What's offered: ⠀ ▪️ Unlimited builds ▪️ EXE and JAR payload support ▪️ Compatibility with all versions of Adobe Acrobat Reader and Foxit Reader ▪️ Claimed bypass of all forms of security ▪️ 100% FUD claim ⠀ Pricing: ⠀ ▪️ 1 Month License: $300 ▪️ 3 Months License: $500 ▪️ Lifetime License: $1,500

‼️ A threat actor is allegedly selling a PDF Exploit Builder advertised as 100% FUD with unlimited builds on a popular cybercrime forum, with tiered licenses starting at $300. ⠀ ‣ Threat Actor: TheStrain ‣ Category: Illicit Service / Malware Builder ‣ Victim: Adobe Acrobat Reader, Foxit Reader (delivery vector) ‣ Industry: Malware / Exploit Tooling ⠀ The actor pitches the builder as reliable, effective, FUD, and stable, capable of bundling EXE and JAR payloads inside weaponized PDF files. They claim it supports all versions of Adobe Acrobat Reader and Foxit Reader and bypasses all forms of security. ⠀ What's offered: ⠀ ▪️ Unlimited builds ▪️ EXE and JAR payload support ▪️ Compatibility with all versions of Adobe Acrobat Reader and Foxit Reader ▪️ Claimed bypass of all forms of security ▪️ 100% FUD claim ⠀ Pricing: ⠀ ▪️ 1 Month License: $300 ▪️ 3 Months License: $500 ▪️ Lifetime License: $1,500

Dark Web Informer

47,108 次观看 • 2 个月前

Nepal Government envisions a cashless society and a Digital Nepal BUT Every interbank transaction comes with an additional cost of NPR 11.3!!!! NPR 10 as a service charge and NPR 1.3 as VAT! This is completely unfair and works against the interests of the general public, especially small and medium businesses. We demand the cancellation of the Vat and Service Charge in digital Payment. CANCEL 11.3!!!! #digitalpayment #ExtraVatandServiceFee #CANCEL11point3

Nepal Government envisions a cashless society and a Digital Nepal BUT Every interbank transaction comes with an additional cost of NPR 11.3!!!! NPR 10 as a service charge and NPR 1.3 as VAT! This is completely unfair and works against the interests of the general public, especially small and medium businesses. We demand the cancellation of the Vat and Service Charge in digital Payment. CANCEL 11.3!!!! #digitalpayment #ExtraVatandServiceFee #CANCEL11point3

Ranju Darshana

24,133 次观看 • 1 年前

Carney: "Arctic security is not a flank, it's a front -- with the shift in the threats and Russia as a direct adversary."

Carney: "Arctic security is not a flank, it's a front -- with the shift in the threats and Russia as a direct adversary."

Scott Robertson

16,753 次观看 • 5 天前

🪼Character Demo Reel🪼 Hello! My name is Gillian Lange and I'm a voice actor with remote capabilities based out of DFW. If you're in need of a voice actor, please send professional inquires to gillianvoiceacts@gmail.com ✨ Carrd: #voiceactor #actor

🪼Character Demo Reel🪼 Hello! My name is Gillian Lange and I'm a voice actor with remote capabilities based out of DFW. If you're in need of a voice actor, please send professional inquires to [email protected] ✨ Carrd: #voiceactor #actor

gillian lange

30,491 次观看 • 2 年前