NakedPages Phishing Toolkit is Now Available on Cybercrime Forums

Cybersecurity scientists at CloudSEK have noticed a new and complex phishing toolkit for sale across many cybercrime message boards and Telegram channels

Dubbed “NakedPages,” the toolkit, which was developed employing NodeJS Framework and runs JavaScript code, is entirely automatic and will come preloaded with more than 50 phishing templates and site initiatives.  

“Naked Web pages is the phishing software any critical developer//spammer requires with extra characteristics than any other reverse proxy merged or PHP phishing framework mixed,” reads a post on a cybercrime forum, which was viewed by CloudSEK.

The submit also mentions that there is a possibility of supplying computer software licenses on payment of $1000 and contributing to the improvement of the open up-resource project on GitHub, with interested events being ready to make contact with the actor by means of a Google Forms site.

In accordance to an advisory by CloudSEK, NakedPages is developed to function on Linux and asks for read through, compose and execute permissions from the ‘user’ and additional requests for read and execute permissions from both ‘group’ and ‘others’ in buy to get the job done.

Furthermore, the toolkit also reportedly attributes completely-built-in and fight-based mostly anti-bot functionalities, capable of detecting bots of unique varieties from above 120 countries.

“[NakedPages] would equip malicious actors with the specifics demanded to start innovative ransomware attacks.”

In conditions of the danger actor guiding the new phishing toolkit, CloudSEK stated it is a new user on GitHub and the cybercrime discussion board, with both of those accounts currently being a lot less than a thirty day period previous.

“There have been no concrete samples shared by the menace actor. Repeated makes an attempt for developing call were created by our source, but the risk actor has not responded,” CloudSEK wrote.

The scientists also warned people who could be affected by NakedPages to keep an eye on for anomalies in person accounts and techniques that could be indicators of possible account takeovers and apply multi-factor authentication (MFA) tactics throughout all accounts.

Some pieces of this write-up are sourced from:
www.infosecurity-journal.com