Strox offers more than just a phishing kit - it’s a vertical integration of the phishing process and consolidates all the different resources required for someone to begin phishing.
Strox Phishing Service & How It Works
WordPress Keylogger Injection
An injection into the
wp-login.php file that secretly steals your WordPress login information.
McDonald’s Phishing Page Used to Steal Saudi Payment Data
A unique phishing kit that targets
McDonald's customers in Saudi Arabia and has a convincing mobile/desktop responsiveness.
Renamed wp-config.php => Sensitive Data Exposure
Attackers continue to find easy victims by crawling websites using enumeration techniques and looking for configuration files that have had their file extension modified.
Popular Web Shell Variants Contain a Hidden Backdoor
Variants of popular PHP web shells have been popping up and analysis reveals that they contain a hidden backdoor used to steal the unauthorized access.