Exposing a Sample Rock Phish Phishing Campaign's Botnet Hosted Infrastructure - An Analysis

0
November 03, 2022

Did you know that a huge percentage of Rock Phish related campaigns are known to have been hosted on a fast-fluxed botnet infrastructure where the ultimate goal is to make them impossible to take offline or basically increase the average time it takes for vendors or researchers to attempt to take the domains offline?

In this post I'll share with everyone a sample portfolio of Rock Phish themed screenshots where the ultimate goal is to present my findings in the context of providing actionable intelligence on the fact that on the majority of occasions Rock Phish gang's campaigns continue to be hosted on a fast-fluxed botnet infrastructure.

Sample screenshots include:




Stay tuned!

About Dancho Danchev

Independent Security Consultancy, Threat Intelligence Analysis (OSINT/Cyber Counter Intelligence) and Competitive Intelligence research on demand. Insightful, unbiased, and client-tailored assessments, neatly communicated in the form of interactive reports - because anticipating the emerging threatscape is what shapes the big picture at the end of the day. Approach me at dancho.danchev@hush.com

0 Comments: