Stopping phishing campaigns with Bash

#1

Post by geek_at » Thu, Aug 13, 2020, 8:25 AM UTC

Stopping phishing campaigns with Bash
blog.haschek.at

Re: Stopping phishing campaigns with Bash

#2

Post by anticristi » Thu, Aug 13, 2020, 8:39 AM UTC

Nice! If you are required to write an email address, it would be cool to use a canary, and see if it shows up on haveibeenpwned.com.

Re: Stopping phishing campaigns with Bash

#3

Post by alufers » Thu, Aug 13, 2020, 8:48 AM UTC

Oh how cool, I thought I was the only one trying to mess with scammy sites when I find them. Although I can see that I could improve my methods, since I usually write a short user script which spams the forms with data from faker.js and let the open tab sit pinned in my browser for a week or so.

Re: Stopping phishing campaigns with Bash

#4

Post by saagarjha » Thu, Aug 13, 2020, 8:58 AM UTC

While this is all fun and games, I am curious if DOSing someone else’s server, even if it’s being used to run a phishing scam, is legal.

Re: Stopping phishing campaigns with Bash

#5

Post by schappim » Thu, Aug 13, 2020, 9:00 AM UTC

I am all for this. Thank you.

Re: Stopping phishing campaigns with Bash

#6

Post by godzillabrennus » Thu, Aug 13, 2020, 9:01 AM UTC

saagarjha wrote: post #4

While this is all fun and games, I am curious if DOSing someone else’s server, even if it’s being used to run a phishing scam, is legal.

I seriously doubt it is legal in the United States. Seems like a pretty clear abuse of a computer network.

Re: Stopping phishing campaigns with Bash

#7

Post by tracker1 » Thu, Aug 13, 2020, 9:03 AM UTC

saagarjha wrote: post #4

While this is all fun and games, I am curious if DOSing someone else’s server, even if it’s being used to run a phishing scam, is legal.

If you're in the US, it could be a violation of the Computer Fraud and Abuse Act. I used to do stuff like this until I became aware of the potential felony behind it.

Re: Stopping phishing campaigns with Bash

#8

Post by 1023bytes » Thu, Aug 13, 2020, 9:08 AM UTC

All banks in the EU are required to use 2FA, I'm curious how these hackers get around that.

Re: Stopping phishing campaigns with Bash

#9

Post by groznyyi » Thu, Aug 13, 2020, 9:09 AM UTC

Done For You Services Affiliate Marketing System

Insane Marketer Wesley Virgin and Ariella have created an offer that is not only making affiliates wealthy but they are helping 100s of millions of NEWBIES earn money online.

Join Hore : https://bit.ly/3gpgGgd

Re: Stopping phishing campaigns with Bash

#10

Post by VBprogrammer » Thu, Aug 13, 2020, 9:19 AM UTC

1023bytes wrote: post #8

All banks in the EU are required to use 2FA, I'm curious how these hackers get around that.

For quite a long time my bank used cargo culted 2FA i.e. 2x things that you know. Pretty embarrassing really. Thankfully they now have a card reader device but it's only used for certain actions (like adding new payees).