Category: Framework

Posts related to one or more of the Phishing Attack Framework components.

Understanding Local Privilege Escalation: The Dirty Frag Vulnerability

Explore the ‘Dirty Frag’ vulnerability in the Linux kernel, a local privilege escalation flaw that enables attackers to bypass security controls through kernel module exploitation.

Evasion, Linux Kernel, Privilege Escalation
SQL Injection in Phishing Campaigns: From Exploit to Data Theft

Leverage SQL injection vulnerabilities to access and manipulate databases, harvesting credentials and sensitive data in phishing campaigns.

Data Harvesting, Phishing Exploitation, SQL Injection
Email Crafting: Designing Deceptive Messages That Mimic Trusted Sources

Email crafting is the core skill in phishing attacks. It’s where reconnaissance data transforms into action, where psychological understanding meets technical execution, and where the…

cyber deception, Email Security, human vulnerabilities, Phishing, Social Engineering
Understanding UTM Parameters

A crucial yet often overlooked aspect of phishing campaigns is the use of UTM (Urchin Tracking Module) parameters. This blog post will delve into what…

Cybersecurity Awareness, Digital Security, Phishing Campaigns, URL Tracking, UTM Parameters
Pick Your Poison

In this article, we will consider various Payloads and Payload Delivery mechanisms. Although we won’t get into the specifics of each (yet), we will provide…

CyberSecurity, Data Exfiltration, Payload Delivery, Payloads, Remote Control
Credential Harvesting Made Easy

Here at P&C, we believe the lowest-energy means to accomplish the task is often the best. In this article, we will set-up a credential trap…

credential harvesting, cybersecurity threats, ethical hacking, phishing techniques, Social Engineering
What are Email Headers?

Emails have become an integral part of our personal and professional lives. While we usually focus on the content of an email, there’s a wealth…

Cyber Threats, Email Headers, Email Security, Message Source, Metadata Analysis
Crash-course in SE

Social engineering tactics often rely on reverse-engineering people in an attempt to exploit their innate human vulnerabilities to achieve malicious objectives. At the end of…

CyberSecurity, human vulnerabilities, psychological manipulation, Social Engineering
Where Do Email Lists Come From?

Email lists used for spam and phishing campaigns are sourced from a variety of locations, with each source having its unique method of acquisition and…

Tactics
Looks Can Be Deceptive: Unmasking the Art of Mimicry

In the vast landscape of the internet, where millions of websites beckon users with the promise of information, services, and entertainment, there exists a deceptive…

cybercrime, CyberSecurity, mimicry, spoofing, typosquatting
Why we care about phishing?

Phishing is a significant cyber threat. At its core, it is a type of attack that tricks the mark into performing an action like revealing…

cyber threat, CyberSecurity, data breaches, Phishing, Social Engineering
Phishing Attack Framework

A phishing attack framework, in the context of cybersecurity, is a structured and organized approach or methodology used to plan, execute, and manage phishing attacks.…

Frameworks, MITRE, Techniques