RU Sophisticated phishing attacks – as xlated

DARK May 30, 2024

1. Research the victim
The first step in creating a sophisticated phishing attack is to gather information about the target victim. Hackers use a variety of methods, including social media, data leaks, and open sources, to learn more about their victims. The more information they gather, the more personalized and persuasive the email they can create.

Examples of information collection methods:
Social networks: Hackers analyze profiles on social networks such as Facebook, LinkedIn and Twitter to learn about the victim’s place of work, position, interests and connections.
Data Leaks: Using leaked databases, hackers can gain access to personal information, including email addresses, passwords, and phone numbers.
Open Sources: Research corporate websites, news reports, and other public sources to obtain information about the company and its employees.
2. Create compelling content
After collecting information, hackers begin creating a phishing email. They pay special attention to detail to make the letter as believable as possible.

Basic elements of a phishing email:
Attractive Headline: The email’s headline should grab the target’s attention and make them want to open the email. For example, “Your account has been hacked” or “Urgent notification from the bank.”
Personalized appeal: The letter begins with a personalized appeal to create the illusion of sovereignty. For example, “Dear Ivan Ivanovich.”
Credible Content: The content of the letter should be logical and believable. Hackers use official language, logos, and design styles to imitate emails from real organizations.
Creating a Sense of Urgency: The letter often uses an element of urgency to force the victim to act quickly without thinking. For example, “Your account will be blocked in 24 hours.”
3.Use of spoofing and masking
Hackers often use spoofing techniques to disguise their emails as legitimate sources. This may include spoofing the sender’s address and creating fake websites.

Sender address spoofing:
Domain spoofing: Hackers use domains that look like legitimate ones to trick recipients. For example, instead of “bank.com” they might use “b@nk.com”.
Use of famous brands: The sender address may contain the name of a famous brand, for example, “support@paypal.com”.
Fake websites:
Creating a clone: Hackers create exact copies of legitimate websites so that the victim does not notice the fakes. Such sites often have very similar URLs, for example “www.bank-security.com” instead of “www.bank.com”.
SSL Certificates: To make a phishing site more convincing, hackers can use SSL certificates to create the illusion of a secure connection.
4. Social engineering
Social engineering plays a key role in sophisticated phishing attacks. Hackers use psychological tricks to manipulate victims into providing sensitive information.

Social engineering techniques:
Establishing Trust: Emails may contain information that inspires trust, such as mentioning well-known company employees or details that may only be known within the company.
Using Fear: Phishing emails may contain threats or warnings to create a feeling of fear in the victim and force them to act immediately.
Promises of rewards: Promises of some kind of reward, such as lottery winnings or tax refunds, to motivate the victim.
5. Testing and improvement
Hackers often test their phishing emails on small groups of victims to gauge their effectiveness. They analyze the results and make changes to the letters to increase their likelihood of success.

Test methods:
A/B testing: Creating multiple versions of an email and sending them to different groups of victims to determine which version performs better.
Analysis of metrics: Hackers track how many emails were opened, how many people clicked on the link, and how many entered their details on the fake website.

Report content on this page