3 ms·
It is great that they got taken down. From my experience, these sites are usually parasites on misconfigured Wordpresseses. We're you able to get the phishing
by ArcHound 11mo ago
It is great that they got taken down. From my experience, these sites are usually parasites on misconfigured Wordpresseses.
We're you able to get the phishing data so that you can help the victims? Is it a good idea to try and do so?
Also, can you please share some bits of the phishing kit for easier detection?
Thank you for your efforts!
- spirovskib 11mo agoThanks for the kind words. We discussed whether to pull the data. We didn't for two reasons: 1. It's not trivial to process that data safely, and all the people in the server are volunteers that pitch in as much as they can. It won't be fair to burden them more. 2. The bots were posting to what appeared to be private or moderated channels. We didn't find an easy way in. Maybe there was a way in, but see item 1 above. So we went with "nuke it from orbit"
- ArcHound 11mo agoYeah, that's the problem, processing the data safely. I wouldn't want to do that either without a lawyer covering my back.