V for Vendetta:Dissecting a Global Phishing Platform After Being Phished

on YouTube ↗30m

" summary

Investigation starts after a booking.com chat link that exposes booking details and leads to five confirmed phishing attempts across four countries; analysis uses urlscan.io and VirusTotal and finds 1,500+ reported phishing URLs reusing site HTML/CSS, Cloudflare/DoS-Guard hosting, and merchant compromises via a Fedar info stealer. Source code snapshot on GitHub reveals an admin panel, Telegram bot, templates and telecopier platform features that run three-stage credit‑card capture with submit.js and blur.input.js and live customer‑support chat.

AI-written summary · about

" chapters (8)

1. 0:00Phishing investigation introduction
2. 3:14Researching the phishing platform
3. 6:07Travel booking phishing case
4. 12:14Booking.com phishing similarities
5. 17:59Travel and e-commerce phishing
6. 22:16Telecopier platform source code
7. 25:16Telecopier platform operation
8. 27:47Preventing phishing recommendations

" related talks

• 29mHook, Line, and Tinker: A Dive into Phishing Campaign SitesRick Ramgattie · BSidesSF 2024
• 27mCatching the PhishermanNick Ascoli, Aidan Raney · BSidesSF 2023
• 01h 01mSomething Something CyberTroy Hunt · NDC Oslo 2017
• 30mTargeted Web Skimming on E-Commerce SitesHendrik Adrian, Takehiko Kogen · FIRST Cyber Threat Intelligence Symposium 2022
• 58mCatching Transparent Phish: Understanding and Detecting MITM Phishing KitsNick Nikiforakis, Bria · OWASP 2022 Global AppSec Europe Virtual Event
• 54mDark Fairytales From A PhishermanMichele Orru · OWASP AppSec Research (AppSecEU) 2015
• 56mCybersecurity & Privacy From The Global LensEva Galperin · nullcon Goa 2019
• 01h 00mHack to the FutureTroy Hunt · NDC Sydney 2019