Security News > 2020 > January > Advanced "16Shop" Phishing Kit Expands Offerings
One of the most advanced phishing kits, known as 16Shop and probably developed by a group known as the Indonesian Cyber Army, has expanded its phish targets from Apple account holders and Amazon to now include PayPal.
"In early January 2020," they say, "ZeroFOX Alpha Team obtained a phishing kit from 16Shop that now targets PayPal customers, indicating they are actively adding brands to their phishing kit portfolio."
16Shop offers its phishing kit as a malware-as-a-service product.
"The goal of phishing kits," comment the researchers, "Is to make this experience seamless, so not-so-technical kit operators can deploy phishing pages without needing to understand the underlying protocols behind managing this infrastructure." 16Shop puts a lot of effort into ensuring this happens.
The phishing kit attempts to collect as much personal information as possible, including country specific PII. The newer PayPal offering supports fewer languages than the Apple and Amazon kits - suggesting, say the researchers, that this is still a work in progress.