zerofox logo
Advisories

ZeroFox Intelligence Flash Report - Sale of Custom Phishlets for Evilginx3 Tool

|by Alpha Team

banner image

ZeroFox Intelligence Flash Report - Sale of Custom Phishlets for Evilginx3 Tool

Product Serial: F-2024-03-20a

TLP:CLEAR

In this flash report, ZeroFox researchers report on the announcement of the sale of custom phishlets for Evilginx3 on the dark web forum xss.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

  • On March 11, 2024, the well-regarded threat actor “blackdatabase” announced the sale of custom phishlets for Evilginx3 on the dark web forum xss.
  • The phishlets for sale target multiple companies; prices start at USD 500 and range up to USD 5,000 for phishlets targeting specified financial sector entities.
  • Evilginx3, when used in conjunction with phishlets, could enable attackers to steal session data, facilitate multi-factor authentication (MFA) bypass, and grant seamless access to sensitive data and funds stored in bank accounts.

Tags: tlp:clear,  phishing & fraud,  financial services, dark web