My Phishing Kit Burnbook
summary
Year of kit research shows phishing kits sell like SaaS: one Indonesian ecosystem centered on 16Shop powers thousands of sites (URLScan ~8,000 16Shop domains in 2020), researchers pull ~1,200 kit zips and ZeroFOX collects 3,000+ zips in months, and ~100,000 domains appear in tracking. Demoed tool PhishPond runs kits in containerized browsers, intercepts exfiltration (file dumps, Telegram APIs), reveals writable username/ip text files, and fingerprints kit TTPs for hunting.
AI-written summary · about
chapters (9)
- 0:00Start
- 1:14Apply
- 8:32Victim Workflow
- 12:1516Shop and Origins of Fraud in Indonesia
- 13:4316Shop - A licensed-based phishing kit service
- 19:12Open Source Needs
- 20:50Phishing Kits
- 21:34Phishpond - Phishing Kit Intelligence
- 34:18Conclusion
related talks
38mTeach a Man to Phish and You Feed Him for a Lifetime
58mCatching Transparent Phish: Understanding and Detecting MITM Phishing Kits
29mHook, Line, and Tinker: A Dive into Phishing Campaign Sites
27mCatching the Phisherman
59mCounter-Infiltration: Future-Proof Counter Attacks Against Exploit Kit Infrastructure
40mNavigating the Shadows: A Comprehensive Exploration of Popular and Malicious Tools on the Dark Web
32mSomething’s Phishy: See the Hook Before the Bait
49mBeyond Takeover: Attacker’s in. Now what?