Red Sky Alliance
Wapack Labs has operated Red Sky Alliance for over seven years. We are a trusted group of organizations, large and small, sharing information about targeted, advanced, and emerging cyber threats in a private secure portal.
Red Sky Alliance offers TLP White and Green reporting that can satisfy most any situational awareness need, with reports, forums and people to ask questions of - Sign up Now for FREE Membership and Access to all Content.
Get Advice, Intelligence, & Help.
The Red Sky Alliance portal offers cyber security reporting and training materials that can help your company meet the cyber threat challenges of today.
Comments
You often hear to pay attention to the address bar to check if the domain you see in your Internet browser is actually the one you intended. But hackers can sometimes spoof that too. In June 2019, Wapack Labs discovered a long-running campaign utilizing this address bar spoofing vulnerability that was fixed in Microsoft Edge, but still works in some mobile Safari version despite being reported years ago.
This results in the phishing page being displayed while the valid URL is in the address bar. The following image shows this exploit in action. The only indicator that it’s a phishing page is the misspelling in the form (brith instead of birth). This vulnerability (CVE 2018-8383) was originally reported back in 2015 and still has not been patched by Safari.
Download the whole report: https://redskyalliance.org/finished-analysis/allantibots
Notes:
1. If you do not view child pornography, you should know this is fake.
2. The CIA is not going to reach out to pedophiles warning them that they are about to be arrested.
3. If a CIA officer were to ever accept a bribe, it's extremely unlikely that they would ask for it via email.
https://securityaffairs.co/wordpress/86899/cyber-crime/cia-extortio...
-
1
-
2
-
3
-
4
-
5
of 10 Next