Nov 1, 02:00 PM

New 'Xiū gǒu' Phishing Kit Targets US, UK, Japan, and Australia with 2,000 Fraudulent Sites; Linked to Midnight Blizzard

A new phishing kit named 'Xiū gǒu' has emerged, targeting users in the United States, United Kingdom, Japan, Australia, and other countries. This kit is associated with over 2,000 fraudulent websites designed to exfiltrate sensitive credentials via Telegram from fake sites. The phishing kit utilizes technologies such as Golang and Vue.js, enhancing its effectiveness in deceiving users. Additionally, the Russian nation-state threat actor known as Midnight Blizzard has been linked to spear-phishing campaigns aimed at thousands of targets across more than 100 organizations, primarily in the U.S. and Europe. Cybersecurity experts are raising alarms about the increased sophistication of these phishing attacks, which pose significant risks to various sectors.