4 ms·
> The website I was taken to was remarkably polished, it looked almost exactly like the real UPS site "Fake Login Page" site generating scripts are pretty clos
by thephyber 3y ago
> The website I was taken to was remarkably polished, it looked almost exactly like the real UPS site
"Fake Login Page" site generating scripts are pretty close to slightly customized versions of "Save Page As..." (plus some find/replace logic to fix domains, JavaScript, etc). They have been around for at least 2 decades. The big logistics companies (USPS, UPS, FedEx, DHL) almost certainly all have FLP generator scripts that are optimized for each one of them by now.
I worked at a social media company and our developers were constantly watching the FLPs that targeted our users. We both built countermeasures so they stopped working and helped mitigate the damage to accounts that we knew were scammed by the FLP sites.
- mrguyorama 3y ago"Back in my day" It seemed like setting up a copy of a site for phishing purposes was a single metasploit command.