Typosquatted domain with a fake login page
Shortly after appearing in certificate transparency logs, the freshly registered domain began serving a copy of the organisation's login page that posted credentials to a third-party server.
3 modules
IG-UC · CASE ARCHIVE
Use cases
The anatomy of real CTI cases: how a threat starts, how it is detected and how it is closed. Every file here is an example scenario.
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.