Hook, Line, and Tinker: A Dive into Phishing Campaign Sites
summary
Hands-on exploration shows phishing sites that proxy real logins and solve captchas using automation; testing with Burp Suite and Firefox reveals Cloudflare fingerprinting and CAPTCHA solvers that let attackers bypass protections. Logs expose adversary-in-the-middle behavior, IPs tied to ExpressVPN, and an attacker SMTP dump revealed in a Location header. Over 200+ sites appear across hosting providers, takedowns run days, and blocking via URLScan plus reporting to eth-phishing-detect / MetaMask and seeding accounts to exhaust attacker email sending materially slows campaigns.
AI-written summary · about
chapters (5)
- 0:00Introduction and speaker background
- 3:27First phishing campaign analysis
- 14:00Second phishing campaign findings
- 21:43Third phishing campaign and brand abuse
- 26:39Key takeaways and conclusion
related talks
58mCatching Transparent Phish: Understanding and Detecting MITM Phishing Kits
32mSomething’s Phishy: See the Hook Before the Bait
27mCatching the Phisherman
40mGet Rich or Get Hunted Trying: Uncovering Large Scale Fraud Operations
30mV for Vendetta:Dissecting a Global Phishing Platform After Being Phished
41mHook, Line, & Sinker - Addressing the Human Risk of Phishing and How to Avoid the Bait
09mBridging the Gap: Developing Accessible Anti-Phishing Solutions
40mMy Phishing Kit Burnbook