Profile picture
, 9 tweets, 3 min read
My Authors
Read all threads
If you want to phish me, at least make an effort 😅
Analyse of the link in the email urlscan.io/result/9715009…
They don’t even try to be smart. The phishing kit is still available at lendcapital.ca/pss/
Same thing at lendcapital.ca/kss/
From the source code of the phishing kit, we have his email: keyword[.]tech[.]2017@gmail.com
If you enter your protonmail credentials, an email is sent to hoda[.]abedini890@gmail.com
This email has been seen in the past
A small summary of what we know
Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Elliot Alderson

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @fs0c131y see all

Profile picture
Elliot Alderson
@fs0c131y
The @ring story is a good opportunity for journalists to explain what is credential stuffing, the dangers, why you shouldn’t reuse password, why you should activate 2FA. Use this story to raise awareness, make it useful. zdnet.com/article/hacker…
You want to submit a talk to a conference, you have one! You can create a talk “Why 2FA is important” or “Why you should implement 2FA” and submit it to a dev conference.
The blame game is funny, no doubt on that “Look at their security hahaha” but after the fun part we need to take our responsibility and transform that into something useful
Read 3 tweets
Profile picture
Elliot Alderson
@fs0c131y
<Thread> Few days ago, @Gizmodo published an awesome investigation about the Neighbors app by @ring. The article is doing an excellent job but no technical details are given. So I decided to give a look at the crime-alert app made by Amazon 1/ gizmodo.com/ring-s-hidden-…
@Gizmodo @ring In the article, @dellcam explained that by examining the network traffic of the Neighbors app, we can get the geographic coordinates of a camera. 2/
@Gizmodo @ring @dellcam So I installed the app on a phone, intercepted the traffic and used all the possible features of the app 3/ play.google.com/store/apps/det…
Read 15 tweets
Profile picture
Elliot Alderson
@fs0c131y
My dear @smittal_ips,

Bro, we need to discuss. Your account has not been "partially" hacked. You like porn, that's all.

Btw, you liked a lot of porn content in the past. You didn't remove everything Mr Data Privacy expert.

Regards,
@smittal_ips Can I have a like with this tweet @smittal_ips?
I regret nothing
Read 5 tweets

Related threads

Profile picture
Keeping Womxn Safe is a 'Radical' Act
@GGforthepeople
There are a lot of people I have encountered that have said they don't care who is the Democratic nominee as long as Trump is out.

I'm not going to settle for just any candidate. All this does is silence the vetting process on a candidate you support. Here's what I want. 1/
I want a president that will fight #ForThePeople .

I want her to think about her legislative plans, listen to her constituents and go back to the drawing board of necessary. 2/
I want a president who has a history of protecting children and know that she will take action on doing so with or without the help of congress.

That she is full of empathy, but can be ruthless & fearless when the country needs her to be. One that has spent her career 3/
Read 23 tweets
Profile picture
Jake
@JCyberSec_
:: Phishing Admin Panel Hunting Thread ::

In this thread we will find ways to hunt and attribute phishing admin panels.

This is a continuation from my #phishing hunting thread released earlier this year. ()

Please retweet to knowledge share among others.
Firstly we need to understand what an admin panel is in relation to phishing sites. There are many phishing-as-a-service (PaaS) offerings for threat actors to buy allowing them to quickly and easily deploy kits online. They normally consists of a threat actor buying an API key.
In this thread I will show you how to fingerprint some of the major panels, if you feel I have missed any let me know as I would love to keep this thread current and up-to-date on new threats.
Read 22 tweets
Profile picture
Jake
@JCyberSec_
:: Phishing Hunting Thread ::

This is a thread about how to hunt and find #Phishing sites.
Retweets would be great to help spread the knowledge and please add your own techniques, ideas and suggestions.

Let's go hunting!
Firstly we need a site to use as a pivot. I have attached a number of sources at the bottom of this thread. For demonstration purposes we will use this site ::

hxxp://www.new.froid-guyader.fr/libraries/sharepointcontract/

This is a #Phishing site against Microsoft Office
Initially let's see if there is a #PhishingKit or #OpenDir on the domain. Enumeration on the domain is important. This is a example of sites to load and see ::

- hxxp://www.new.froid-guyader.fr/libraries/
- hxxp://www.new.froid-guyader.fr/
- hxxp://www.froid-guyader.fr/
Read 16 tweets
Profile picture
Bad Packets Report
@bad_packets
⚠️ WARNING ⚠️
@Forbes Magazine subscription website (forbesmagazine.com) is infected with #magecart malware.

Exfil domain: fontsawesome[.]gq (🇧🇬)
@urlscanio results: urlscan.io/result/8630561…
Deobfuscated code: pastebin.com/3AR7wQ70
@Forbes @urlscanio forbesmagazine.com is back online and we've confirmed the malware has been removed.

If you made a purchase on the site while it was compromised, your credit card information was likely stolen.

@Forbes @urlscanio We've been receiving a lot of questions from reporters regarding this incident. Here's the timeline so far:
Read 7 tweets
Profile picture
Rasta ™
@NSRasta
#BOYCOTTS: Your Quick-Start Guide buff.ly/2JGy9B0

( $BCE shareholders & #Advertisers partnering with #Bell media )
pluspora.com/people/b966681…
TARGET #ADVERTISERS who fund & support #business practices of #Bell Canada #BCE #Telecom #CRTC #elxn43 #partnerships #competition BOYCOTTS are a tool for holding a company accountable for actions against workers, consumers, communities, minorities, animals or the environment. It is marketplace democracy in action. Consumers voting with their money for social and economic change. (BELL MEDIA LOGO) - Lack of public accountability, no adherence to regulations, unfair business practice. WARNING TO ADVERTISERS
Which #Business (paying #Bell Media through #Advertisements on #CTV),
do you think Canadians should #Boycott first?

Here are three that #advertise daily with #Bell_Media
Rewarding $BCE Shares by unethical business practices?
Bell answers to none of their customers. #CHANGE Partnerships and Advertisers that are willing to share their reputation with Bell Canada KIA Canada, JEEP, BluenoseRV Center Bridgewater NS and more
You may unwillingly be funding your own lack of #CustomerService? 🚨
Who Owns What? #Owner #Bell Canada #BCE 📛
#GoLeafsGo #CraveTV #CTV #VirginMobileCan #BellMobility #Fibe #Bell_Aliant
#Northwestel #CP24 #AnimalPlanetCa #Discovery #MTV #Bravo #Comedy
Read 50 tweets
Profile picture
Piyush Katariya
@AhamPiyush
#OSHO

Start with #desire.

One has to begin with desiring something that cannot be achieved by desiring. But if you are aware of this fact - if you are aware of the fact that you are desiring something that cannot be desired - it helps. At any moment, you can take the #jump.
With the #mind we cannot understand anything which is effortless. Mind means effort. The faculty of the mind is to do something; it is an instrument for doing. The very faculty of mind is to #achieve something, to gain some desire.
You cannot begin with no #desiring. The mind will make this non-desiring also the desired object.

The mind will create new desire and say, “Okay, I will try not to desire.” It will say, “Really, it looks fascinating. I will try to do something so that this no desiring happens.”
Read 24 tweets

Trending hashtags

#BekasiSpammerz #Feminine #Hate #method #scholar #Try #Good #Internet #CA #ForThePeople #ohnohedidnt #acceptance #suffering #grace #consistency #scam #Effort #Monopoly #CRTCeng #iPanelPro #wait #BREXIT #unknown #barrier #realisation
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!