Get Rich or Get Hunted Trying: Uncovering Large Scale Fraud Operations
summary
A demonstrated Evilginx reverse proxy captures live session tokens and cookies, lets attackers refresh the real site, change the password and lock out the owner, and combines stolen credentials with device-fingerprint spoofing from emulators that mimic model, carrier and IP. One emulator produces 8,000+ compromised sessions. OTPs are bypassed with smishing, SIM/VPN/SOCKS proxy chaining or malware. Defenses shown include AI image and logo detection plus heuristic rules to flag cloned landing pages and reflected sessions.
AI-written summary · about
chapters (25)
- 0:00Introduction
- 0:39Agenda
- 1:10Digital Transformation
- 1:38New Targets
- 2:58Attack Tactics
- 3:30Fishing
- 3:58SSL Certificates
- 4:20Session Randomization Folders
- 4:51New Delivery Methods
- 5:27AntiResearch Techniques
- 6:25Session Protection Techniques
- 8:00Blocked AP List
- 9:05Reverse Proxy Phishing
- 10:31Instagram Phishing
- 17:18What is Mobile Emulator
- 19:13Device Fingerprint Spoofing
- 20:45Example
- 21:30Network Connection
- 23:24Scripts
- 24:08Second Factor Authentication
- 26:14Transfer of Funds
- 26:38Artificial Intelligence
- 27:38Phishing
- 29:56What you need to do
- 32:11Thank you
related talks
26mTechnical Tracks
29mHook, Line, and Tinker: A Dive into Phishing Campaign Sites
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
26mIntegrating Identity and Fraud
21mSecurity is Everyone's Responsibility
49mThe Death of Conventional MFA: How AiTM Attacks Are Changing the Game
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking
41mThe State Of Credential Stuffing And The Future Of Account Takeovers