ONNX STORE: PHISHING-AS-A-SERVICE PLATFORM TARGETING FINANCIAL INSTITUTION

Summary from the TLDR InfoSec newsletter

This article discusses a Phishing-as-a-Service called ONNX that threat actors are using to orchestrate phishing attacks through embedded QR codes in PDF attachments. NNX Store is suspected to be a rebranded version of the Caffeine phishing kit that offers services like 2FA bypass mechanisms and Cloudflare protection. The platform facilitates the distribution of phishing tools and aids cybercriminals in stealing credentials for financial gain and potential ransomware attacks.