https://stevesec.net/tags/phishing/Recent content in Phishing on SteveSecHugoen-usWed, 01 Jan 2025 00:00:00 +0000https://stevesec.net/blog/clickfix-defense/Wed, 01 Jan 2025 00:00:00 +0000https://stevesec.net/blog/clickfix-defense/Fake reCAPTCHA pages that trick users into pasting an mshta command into the Run dialog. How the ClickFix attack chain works, start to finish, and how to shut it down.https://stevesec.net/blog/google-zip-mov-tld/Thu, 12 Dec 2024 00:00:00 +0000https://stevesec.net/blog/google-zip-mov-tld/How Google’s introduction of .zip and .mov top-level domains creates new phishing and malware delivery attack vectors.https://stevesec.net/blog/cdn-phishing-walkthrough/Sat, 09 Dec 2023 00:00:00 +0000https://stevesec.net/blog/cdn-phishing-walkthrough/A walkthrough on setting up Azure CDN phishing infrastructure using EvilGoPhish for authorized red team engagements.https://stevesec.net/blog/warhorse-configuration-file/Sat, 09 Dec 2023 00:00:00 +0000https://stevesec.net/blog/warhorse-configuration-file/An example Warhorse phishing configuration file for automating red team infrastructure deployment.