ClickFix Defense
Fake reCAPTCHA pages that trick users into pasting an mshta command into the Run dialog. How the ClickFix attack chain works, start to finish, and how to shut it down.
Posts tagged "Phishing"
Google Allows for .zip and .mov Top-Level Domain (TLD)
How Google's introduction of .zip and .mov top-level domains creates new phishing and malware delivery attack vectors.
CDN Phishing Walkthrough
A walkthrough on setting up Azure CDN phishing infrastructure using EvilGoPhish for authorized red team engagements.
Warhorse Configuration File
An example Warhorse phishing configuration file for automating red team infrastructure deployment.