As per the recent tweets, we came to know that Australians are likely to encounter a phishing attack. The posted screenshot in the tweet displayed how a target gets an SMS with a link to click on their phone.
The message goes like this: “Please update your MyGov details to receive your outstanding tax return at hxxps://au-helpgov.com/ now.” And after clicking the link, the user is directed to a phishing page where they are prompted to provide their information. The hacker obtains the victim’s information if the user enters the data.
Heads up #Australia keep an eye out for this active phishing campaign.
Do not click!#cybersecurity #infosec #Australian #auspol https://t.co/wRUJs4vszR
— CyberKnow (@Cyberknow20) August 31, 2022
The kit or tool used here goes by the name KITIntel. According to the Twitter User @JCyberSec_, he states that before displaying the page, the kit verifies the source referrer. Also, it will only function on a mobile device.
Furthermore, he added that the Phishing Kit Intelligence Platform was introduced last year. Phishing kits may now be uploaded, analyzed, grouped, and researched like never before. A plethora of untapped intelligence exists in phishing kits. You must have this tool in your toolbox if you deal with phishing.
