New Phishing Kit Xiū gǒu Targets Users Across Five Countries With 2000 Fake Sites
Researchers studying cybersecurity have revealed a new phishing kit that has been used since at least September 2024 in efforts aimed at Australia, Japan, Spain, the United Kingdom, and the United States.
According to Netcraft, the Xiū gĒu kit has been used in attacks against a range of verticals, including the public sector, postal service, digital services, and banking services, and more than 2,000 phishing websites have been found using it.
According to a research released Thursday by Netcraft, threat actors frequently use Cloudflare's anti-bot and hosting obfuscation features to avoid detection while deploying phishing websites utilizing the kit.
In September 2024, security researchers Fox_threatintel (@banthisguy9349) and Will Thomas (@ BushidoToken) described some of the ph...