Check Point Research and the cyber intelligence company, CyberInt, have collaborated to discover the next generation in phishing kits, currently being advertised on the Dark Net. Unlike previous kits which are primarily composed of just one or two pages to collect personal or financial data, this new and advanced phishing kit offers much more in order to create a more convincing fake site.
Created by a character called ‘[A]pache’, it offers those with low technical know-how to manage their own phishing campaigns to collect the personal and financial information of unsuspecting consumers.
Below we will show how [A]pache’s phishing kit works and how it is used to carry out online scamming operations.
The Advertisement
[A]pache makes it very easy for those with very little technical ability to get carry out their own cyber-attack. By simply downloading his multi-functioning phishing kit and following his installation instructions, it would not take long before a threat actor is able to launch his campaign.
... ...
...
At $100-$300, the cost is higher than more standard phishing kits. Standard kits usually retail at $20-$50, with some even free, as they only provide login pages and prompts for personal and financial information. With [A]pache’s phishing kit however, threat actors are provided with a full suite of tools to pull carry out their attack. These include a whole backend interface with which they can create convincing fake retail product pages and manage their entire campaign.