PhaaS-Phishing as a Service: HackShit made Phishing easy ever


Crimeware as a service is not new for the cyber criminal. After Katyusha Scanner- Fully automated SQL vulnerabilities scanner a new platform introduced Hackshit.

The Hackshit is a Phishing as a Service (PhaaS) platform provide low cost phishing campaign and marketplace. They offer free trial of their service for limited set of attempts. They allow beginner scammer to launch phishing campaign without knowledge of hacking.

You can buy hacking tools - mass senders, spam-page generators, crypters, surveillers, spywares, RAT and trojan in their Marketplace. You can easily create phishing page of famous site like facebok, google, twitter etc. Here you can also trade logs in which you get by your campaign in the marketplace to earn money from ready buyers all over the world and get to meet professional hackers to earn digital currency (Bitcoin / Perfect money).

Hackshit, that records the credentials of the phished victims. The phished bait pages are packaged with base64 encoding and served from HTTPS websites with “.moe” top level domain (TLD) to evade traditional scanners. “.moe” TLD is intended for the purpose of ‘The marketing of products or services deemed’. The victim’s credentials are sent to the Hackshit PhaaS platform via websockets.

“When dozens buy it and initiate attacks every day, the potential fallout will be significant,” Recorded Future director of advanced collection Andrei Barysevich said.
“The scale of attacks which is available to criminals is quite unprecedented now. And the convenience of this; someone who wants to engage in this type of activity doesn’t have to be a hacker, he doesn’t have to know how certain tools operate or what exploit packs they should be using. The tool will do everything for them.”  

Comments

Post a Comment

Popular posts from this blog

POS: Security Flaws allows hacker to change price, steal data

Image
Researchers at ERPScan discovered that SAP’s POS product, that is a component of the company’s SAP for Retail giving, was stricken by many flaws. Specifically, the system’s server element, Xpress Server, lacked necessary authorization checks for vital practicality. This allows AN assailant with access to the system to send malicious configuration files to Xpress Server and gain complete management of each the frontend and backend of the PoS system. A hacker will abuse tens of commands, permitting them to steal knowledge from all the credit and debit cards used at the targeted store, and apply special costs and discounts to such that things. These discounts is applied for such that times in order that AN item contains a tiny value only fraudsters visit purchase it. Fraudsters may also got wind of the system in order that their purchases area unit charged to the previous customer’s card. An assailant may also modification the info displayed on a receipt, as well as to s...
Read more

"FruitFly" Mac malware: longstanding Mac backdoor discovered

Image
The FBI is presently work many infections tied to a mysterious family of Mac-based malware known as "FruitFly." When asked concerning the threat, a proponent for the Bureau told Motherboard that "as a matter of long policy, the FBI neither confirms nor denies the existence of investigations." however 2 security researchers say the FBI is so work the malware. One of the researchers, Malwarebytes's Thomas Reed, discovered the primary variant of FruitFly back in Jan 2017. At the time, he represented the threat as "a piece of malware in contrast to something I’ve seen before, that seems to possess really been alive, undetected, for a few time." FruitFly one is "extremely oversimplified on the surface," in Reed's estimation. however it distinguishes itself by its use of "ancient" functions to capture screenshots and acquire digital camera access. The malware's binary additionally contains lib jpeg, open ASCII tex...
Read more

GOT: Star's Personal detail leaked from HBO

Image
Recently group of Hacker released HBO dumps which contain the Private information of the starts of the GOT: Game of Thrones. As there is no doubt that the most awaited season 7 of Game of Thrones has been started to telecast on the television channel HBO. At the same time hacker claimed that they have breached the network of the channel HBO, collect data and demand the ransom as not to publish the content of Game of Thrones on the internet. Hacker releases the one minute video on the internet to chief executive of HBO claiming that they have taken 1.5TB of data which contain upcoming videos of the season 7 of GOT, scripts of the episodes, email of the stars, also many more confidential records. As the proof of their work hacker “Mr Smith” released some of the 3.4 GB data which containing some private info of the stars, technical data of HBO’s internal network, emails, drafted scripts. The hacker demanded to pay $12 - $15M in the equivalent cryptocurrency Bitcoin. I...
Read more