Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

GreenSpot APT Targets NetEase 163.com Users with Fake Download Pages & Spoofed Domains

hunt.io | blog | #credential-theft | #phishing | #apt | #greenspot | #netease | #domain-spoofing

Summary

GreenSpot-linked infrastructure spoofs NetEase 163.com with a malicious login page and fake download pages on domains registered hours apart via a reseller, to steal credentials.
Published
Collected

original ↗

Related coverage

  1. SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia (hunt.io)
  2. Chinese-Speaking Operator Uses AI Agents to Target Government and Education Systems Across Asia (hunt.io)
  3. Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities (hunt.io)
  4. Chinese-speaking Operators Clone FIFA's World Cup 2026 Ticketing Site To Steal Fan Logins and Card Data (hunt.io)
  5. Iranian APT Infrastructure in Focus: Mapping State-Aligned Clusters During Geopolitical Escalation (hunt.io)
  6. Operation SouthNet: SideWinder Targets South Asia Maritime (hunt.io)

back