3 ms·
> The group behind this is using the stored usernames and passwords to simulate a web browser login through fake browser software. This software simulates the a
by diafygi 12y ago
> The group behind this is using the stored usernames and passwords to simulate a web browser login through fake browser software. This software simulates the actual login process a user would use if they are using Firefox/Safari/Chrome to access their Namecheap account.
So basically PhantomJS? Or is it more sophisticated than that?
Also, this might actually let me see if I'm in the list, since I will get an unsolicited 2FA text if they try my account.
- cbhl 12y agoMy guess would be Selenium.
- jtheory 12y agoDoubt it -- that's using real browser software, and I imagine it would also be way too slow for effective large-scale brute force attempts.
- Mandatum 12y agoIt's likely just a multi-instance setup of Hydra or wfuzz, PhantomJS would have too much overhead.