Phishing Kit Collecting Victim's IP Address, (Sat, May 20th)

While reviewing my last findings today, I found a phishing email that delivered a classic .shtml file called “PROFORMA INVOICE.shtml”. Right now, nothing special, emails like this one are widespread. When you open the file in a sandbox, it reveals a classic form:

Article Link: https://isc.sans.edu/diary/rss/29866

1 post - 1 participant

Read full topic

address called collecting email emails file findings ip address kit may phishing phishing kit sandbox sat special victim