[MART] - Daily Diary #612 - Caffeine Phishing-As-A-Service Platform

[ctas-mat at appgate.com]

Hello,

I hope everyone is doing well!

Below is the entry for today.

10/11/2022 - Diary entry #612:

Caffeine is a recently documented Phishing-as-a-Service platform used by criminals since at least March 2022. Caffeine is advertised on multiple cybercrime underground forums and its subscription is more expensive compared with similar platforms. The reason is that it allows threat actors to set up and launch their own campaigns, by simply registering on the platform with an email address.

The platform offers features to create customized phishing kits (including phishing email templates), manage multiple-stage pages, dynamically generate URLs for hosted malicious payloads, track campaign email activity, set up anti-detection/analysis systems, customer support services, and its own Python or PHP-based email management utility for mass spam automation.

Caffeine was discovered after being employed on a large-scale phishing campaign with the objective of stealing Microsoft 365 account credentials. As it becomes more popular and receives updates, we expect more phishing campaigns to be launched via this service.

Kind Regards,

[https://d3aafpijpsak2t.cloudfront.net/images/Signature/logo@2x.png]<https://www.appgate.com/>

[https://d3aafpijpsak2t.cloudfront.net/images/Signature/likedin@2x.png]<https://www.linkedin.com/company/appgate-security/>     [https://d3aafpijpsak2t.cloudfront.net/images/Signature/twitter@2x.png] <https://twitter.com/AppgateSecurity>   [https://d3aafpijpsak2t.cloudfront.net/images/Signature/youtube@2x.png] <https://www.youtube.com/channel/UC-8GvxcZbm-R3EJNl8jYjiQ>



MART

Malware Analysis and Research Team
Appgate

E: ctas-mat at appgate.com<mailto:ctas-mat at appgate.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.immunityinc.com/pipermail/mart/attachments/20221011/5f5e886f/attachment.htm>