Sounds like they got off easy.
They probably did. But it's a volunteer effort, we all contrinbute as much each individual's time permits.
Readit Newsspirovskib commented on An exposed .git folder let us dox a phishing campaign · Posted by u/spirovskib
spirovskib commented on An exposed .git folder let us dox a phishing campaign · Posted by u/spirovskib
It is great that they got taken down. From my experience, these sites are usually parasites on misconfigured Wordpresseses.
We're you able to get the phishing data so that you can help the victims? Is it a good idea to try and do so?
Also, can you please share some bits of the phishing kit for easier detection?
Thank you for your efforts!
Thanks for the kind words. We discussed whether to pull the data. We didn't for two reasons:
1. It's not trivial to process that data safely, and all the people in the server are volunteers that pitch in as much as they can. It won't be fair to burden them more.
2. The bots were posting to what appeared to be private or moderated channels. We didn't find an easy way in. Maybe there was a way in, but see item 1 above.
So we went with "nuke it from orbit"
Is your cybersecurity team understaffed, overworked and underbudgeted? Are they expected to solve all problems and drive improvement, while working through information noise and disbelief from users, engineers and management?
We feel such security team deserve help in keeping their focus on the key priorities, most pressing threats and continuous education of the organization.
Our platform provides filtered and easy to process key notifications, knowledge articles and statistics to enable the one-man armies of security do their magic.
The core notification package is free forever - notifications that impact all of us
That sounds like a great idea, keep it up!
Thanks. I'll try to work out as many functionalities as possible to make our lives easier