Hunting AitM Phishing Infrastructure Using Certificate Transparencyj027.net1 points·by j027·5 เดือนที่ผ่านมา·1 comments
j027·15 วันที่ผ่านมา·discussPhone verification services exist to give you a real number for the purpose of passing this kind of verification.They even have APIs for these services. They make money since they can use the same number to verify different things.
j027·2 เดือนที่ผ่านมา·discussTo add onto this, cloudflare switched away from recaptcha a while ago. https://blog.cloudflare.com/moving-from-recaptcha-to-hcaptch...I think they now use their own Cloudflare turnstile if I remember correctly, but back then they switched to hcaptcha.
j027·2 เดือนที่ผ่านมา·discussYou can still use the audio captcha, but I’m not sure how long that’ll be around.
j027·2 เดือนที่ผ่านมา·discussCanvas seems like it’s not that great. But if you then use Blackboard Ultra it makes canvas look amazing.
j027·5 เดือนที่ผ่านมา·discussOP here. My university was targeted by a recent phishing attack, and these are my findings. I hope this helps others, but this was my first experience with an Adversary in the Middle (AitM) attack.
They even have APIs for these services. They make money since they can use the same number to verify different things.