This Jen, is the internet

Searching for something else I found a notification for a malware detected months ago, the thing that struck me was the name of the file: FixInternet.exe The first thought was this:

Correios phishing kit

In the last few weeks I have noticed that attacks on Correios are constant. I have studied the matter a bit: it is the Brazilian state company that manages shipments and payments related to them. The scam is always the same, attackers write to users saying that a shipment is blocked and that a small … Continue reading Correios phishing kit →

Phishing against Kraken

At the end of a pretty busy day, I finally found a few minutes to check out the incoming notifications from Matrix. I noticed a kit that targets Kraken customers because their icon reminds me of the ghost from Pacman, and just today I got the vintage Pacman console 🙂 The domain used for the … Continue reading Phishing against Kraken →

Attack against Correios

This morning I came across a kit aimed at Brazilian taxpayers. The domain used for the attack is consultarencomeda[.]online The attack is currently in its initial phase, the domain was registered a few hours ago and the kit was copied to the hosting. Matrix intercepted these two activities, analyzed the archive containing the kit and … Continue reading Attack against Correios →

From Russia with love

A few months ago I was informed of an investigation into a type of fraud that sees some infrastructure based in Russia at the center of attention. I was contacted because Matrix had reported a domain that was later used for fraud. This is the report: https://urlscan.io/result/37dd713d-0cfe-4fd4-a377-1f154ecd2f4f/ This is the full article on Qurium: https://www.qurium.org/alerts/deep-fake-video-of-maria-ressa-connected-to-cyberscam-network-in-russia … Continue reading From Russia with love →

Phishing attack against Wio

To be honest I didn't know this bank. Today Matrix identified these two threats and so I did a little research into who they are. It is a bank based in the United Arab Emirates. Looking at the wio.io website the first thing that struck me was that in the management section they don't have … Continue reading Phishing attack against Wio →

Intesa San Paolo phishing kit

A few hours ago Matrix identified a phishing kit targeting customers of the Italian bank Intesa San Paolo (intesasanpaolo[.]com). This site is hosted on cprapid[.]com, the full url is weblntesasanpaolo[.]35-180-129-166[.]cprapid[.]com. I just report it as malicious on urlscan.io. The kit code is a mess 😦 I don't think the low quality indicates attempts at evasion, … Continue reading Intesa San Paolo phishing kit →

Phishing campaign based on .best domains

A new tool launched in recent days has made it possible to quickly detect an attack based on various .best domains.Matrix had reported these domains on urlscan.io several hours ago. From the evidence gathered in recent minutes, it appears that the attack targeted customers of the US bank America First Credit Union. Below is the … Continue reading Phishing campaign based on .best domains →

1M in less than four months:)

After Twitter blocked my account I moved to Urlscan.io where Johannes welcomed and supported me very kindly. I was able to appreciate the platform and today we reached the milestone of one million submissions made. Thanks to the urlscan.io team for their work!

REALFLIGHT EVOLUTION on Lenovo ThinkCentre neo 30a

I think it's been about 30 years since I've installed a game on my computer. The last one I think was Gunship 2000 or something!Today, however, I installed this simulator for model aircraft. From the videos and comments it seemed like a well-made product and so I decided to buy it to learn how to … Continue reading REALFLIGHT EVOLUTION on Lenovo ThinkCentre neo 30a →