Security News > 2023 > June > Phishing campaigns thrive as evasive tactics outsmart conventional detection

A 25% increase in the use of phishing kits has been recorded in 2022, according to Group-IB. The key phishing trends observed are the increasing use of access control and advanced detection evasion techniques.

The rise in evasive tactics, such as antibot techniques and randomization, poses a significant challenge for conventional detection systems and extends the lifespan of phishing campaigns.

A phishing kit is a set of tools that enables cybercriminals to create and operate several phishing pages at once.

In total, just under half of the phishing kits from 2022 relied on email to handle stolen information with Gmail being the most preferred email service used for data collection among phishing kit creators.

Phishing operators create random website folders that are only accessible by the recipient of a personalized phishing URL and cannot be accessed without the initial link.

"Automation enables phishers to create and manage hundreds of websites every day," said Dmitry Volkov, CEO of Group-IB. "Extracting and monitoring for phishing kits is an essential part of protecting against phishing attacks. It can help identify and block phishing before it causes massive damage. Additionally, analysis of phishing kits is invaluable from an intelligence-gathering perspective as it provides valuable insights into the TTPs of adversaries. In many cases, it can also help to identify phishing kit developers which is useful for prosecution of threat actors," Volkov concluded.

News URL

https://www.helpnetsecurity.com/2023/06/01/advanced-detection-evasion-techniques/