INVESTIGATING INFRASTRUCTURE AND TACTICS OF PHISHING-AS-A-SERVICE PLATFORM SNIPER DZ

Summary from the TLDR InfoSec newsletter

The Phishing-as-a-Service platform Sniper Dz has been detected using over 140,000 unique phishing websites. It uses various techniques to hide its malicious activity such as utilizing proxymesh[.]com to hide backend servers, obfuscating template code, abusing legitimate SaaS platforms, and employing malicious redirects. Sniper Dz offers these services free of charge on its platform and also provides a centralized infrastructure for exfiltrating credentials and tracking victims.