OwnZap Infosec

Wishing you a Happy New Year..!!

STAY HOME. STAY SAFE.

Google reCAPTCHA Abused in Multiple Phishing Campaigns

Multiple Microsoft-themed phishing campaigns have been discovered that are using phony Google reCAPTCHA. In these, the attackers are looking for credentials of senior employees of various organizations.

The phishing campaigns have been active since December 2020 and largely focused on senior employees working in the banking sector. These phishing attacks are likely a part of a single coordinated campaign.

Hackers were observed operating FakeUpdates campaigns using Microsoft Teams updates as a lure to target educational organizations.

A live-streaming video website database leaked on the . Stickam featured user-submitted pictures, audio, video, and most prominently, live streaming video chat.
The data is hashed using MD5 and there are around 531k entries on this database.