PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cảnh báo chiến dịch lừa đảo chiếm đoạt thông tin thẻ tín dụng nhắm vào người dùng các ngân hàng tại Việt Nam

blog.viettelcybersecurity.com | blog | #phishing | #social-engineering | #fraud | #credit-card | #vietnam | #banks
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Viettel warns of a phishing campaign impersonating Vietnamese banks since late 2022, luring credit card users with limit-increase and card-service offers to steal card details, OTPs, and funds.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
Luận bàn về trào lưu Phishing trong ngành tài chính, ngân hàng cuối năm 2019
A Vietnamese security writer reviews 2019's banking phishing wave, from the MSB data leak to fake bank SMS campaigns, showing how social engineering keeps evolving against e-banking users.
blog · netspi.com
Adding Web Content Filter Exceptions for Phishing Success
Describes how attackers can submit phishing domains to web content filter categorization services so corporate filters whitelist the sites, improving success rates in phishing engagements.
blog · netspi.com
All You Need Is One – A ClickOnce Love Story
ClickOnce deployment, built for easy Windows app installs, doubles as a phishing vector: one click can grant a malicious payload temporary admin privileges, controlled by registry trust settings.
blog · netspi.com
Malicious MobileConfigs
A phishing email delivering a .mobileconfig profile can reroute iOS devices through an attacker proxy, install malicious MDM, and capture HTTP/HTTPS traffic or domain credentials via Burp.
blog · netspi.com
Backdooring Office Documents
Describes embedding a Base64 Meterpreter payload in an Office VBA macro so a legitimate emailed document can be re-sent as a backdoor after harvesting domain credentials.
research · blog.viettelcybersecurity.com
Chiến dịch phishing các ngân hàng tại Việt Nam
Viettel Threat Intelligence tracks a phishing campaign against Vietnamese banks: fake transfer receipts lure Facebook sellers to counterfeit e-wallet pages harvesting credentials and OTP codes.
Back