The Spiderman phishing kit is a phishing-as-a-service tool that allows attackers to create fake login pages to steal credentials. It's known for its user-friendly interface and ability to bypass security measures like two-factor authentication. The kit has been used in various campaigns targeting organizations worldwide.
A new phishing-as-a-service called Starkiller uses disguised links to load real login pages from target brands. It acts as a relay between victims and legitimate sites, forwarding usernames, passwords, and MFA codes to bypass security measures.
An investigation uncovered a large network of fake support groups on Telegram that spread cryptocurrency stealers and drainers. The network was found to be actively promoting malicious tools designed to drain crypto wallets.