📕 Le Dico du scam is now available online, opensource and waiting for your pull-requests :) 🔎 At StalkPhish, we analyze French-language scam channels, and cybercriminal forums on a daily basis. Over time, we’ve compiled a glossary of the slang used in these networks. github.com/StalkPhish/d...

🥳 I'm really excited to be at #Botconf again this year! See you there, friends! I'm bringing back some handmade goodies!

Th slides for the talk given by @o0tad0o.bsky.social during @coriin.riin.fr.ap.brid.gy 2026 are available on our gitHub repo: github.com/StalkPhish/c...

👉 You can get a refund too! "Yeah, but what?" "I don't know." "But from whom?" "I don't know." 🤔 But it'll be quick, since your bank details are being broadcast live on the scammer's Telegram channel...

😤 Yeah that's right, stop scam-baiting the scammers! Everyone already knows about this scam! ... it's been implemented in the PhishingKit-Yara-Rules project for detection since... January 2025! This is outrageous!!!!

🚀 It's live. The Web Search on StalkPhish.io is now available - no account, no API key, no friction. Search by URL, domain, or IP address and get instant phishing intelligence from our threat database, covering the last 7 days of activity. 👉 Try it now stalkphish.io #ThreatIntelligence #Phishing

🚀 It's live. The Web Search on StalkPhish.io is now available - no account, no API key, no friction. Search by URL, domain, or IP address and get instant phishing intelligence from our threat database, covering the last 7 days of activity. 👉 Try it now stalkphish.io #ThreatIntelligence #Phishing

Mardi 31 mars 2026 j'interviendrai durant la conférence #CoRIIN pour présenter les nouvelles techniques utilisées par les scammers français ces derniers mois. www.cecyf.fr/coriin/corii...

🤔 It is common to uncover entire infrastructures dedicated to scams. StalkPhish .io can detect these infrastructures in order to monitor them and prevent future waves of scams. 🔥 Knowledge is power. -- Contact us for more details or visit stalkphish.io

🎣 Following scammers with StalkPhish.io Using Telegram data collected by StalkPhish probes, it's possible to pivot from a single phishing to an entire threat actor's ecosystem: Attackers' poor OPSEC+the right tools = actionable intelligence. 🔗 Need help with an investigation? Visit stalkphish .io

😅 digging into 10 days of scammers Telegram data stored into stalkphish.io DB... Gonna applied some filters!

4️⃣ figures to present the results of the work carried out by StalkPhish, dedicated to hunting down phishing, fraud, and those involved in these activities.

✨️ Batch N°2️⃣5️⃣5️⃣ of PhishingKit Yara rules! ✨️ 👉️ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Netflix 📌 ANTAI 📌 Itaú Unibanco 📌 M&T Bank 📌 Nedbank This free and #OpenSource project is now 8️⃣7️⃣️5️⃣ Yara rules available! github.com/t4d/Phishing...

🚀 New @StalkPhish .io Plans. Try Free for 7 Days We're excited to announce two new subscription plans on StalkPhish .io, designed to better fit your phishing detection needs. ➡️ Starter : Ideal for your first steps in threat monitoring. ➡️ Researcher : Built for security researchers and power users.

Thomas Damonneville explained yesterday on the french television evening news why the number of phishing sites pretending to be parcel delivery services would increase as the end-of-year festivities approached. Based on StalkPhish.io data.

💾 Here is an excerpt from the names of databases used by French scammers to target European citizens. These databases are consolidated and made available to their customers via Telegram bots for a few crypto-milli-coins to target victims more accurately and approach them with greater authority.

💡 #phishing investigation/monitoring use case for the StalkPhish.io API: ➡️ Use "ipv4" API endpoint to retrieve information about IP address hosting phishing pages (args: 223.29.226.200, from_date=2025-11-01&to_date=2025-11-09, extract)

Today, we’re excited to share details about the enhanced StalkPhish.io' #API that brings powerful search capabilities and real-time threat intelligence directly to your security workflows. stalkphish.com/2025/11/05/s... #phishing #scam #fraud

📝 Le marché des "fiches" en pleine expansion sur les réseaux d'arnaqueurs. 🧩 Tirées des fuites de données massives, ces "fiches" consolident, dans une même base de données, les informations personnelles de millions de français.e.s. ➡️ Plus d'information ici: stalkphish.com/2025/09/15/s...

🔥 Destiné à contourner les filtres anti-phishing, l'𝐀𝐏𝐏𝐄𝐋 𝐄𝐍𝐓𝐑𝐀𝐍𝐓 est une des transformations majeures du scam francophone ces derniers mois: pour créer un sentiment d'urgence, et même éviter d'avoir à déployer un site de #phishing! 👉 Lire notre dernier article: stalkphish.com/2025/09/15/s...

🔥 La désormais classique arnaque par SMS "bonjour vous etes chez vous?", destinée à: ➡️ appeler à engager l'échange ➡️ conditionner la potentielle victime à donner de l'information ➡️ router la victime vers une page de phishing dédiée à la récupération d'informations bancaires et personnelles

📢 Nouvel article sur le blog de @stalkphish.bsky.social "Smishing à la française, collection Automne-Hiver 2025-2026" 🔎 Nouvelles techniques et tactiques utilisées par les scammers francophones ces derniers mois. stalkphish.com/2025/09/15/s...

#Podcast #Cybersécurité Épisode #512 consacré à @stalkphish.bsky.social, avec @o0tad0o.bsky.social www.nolimitsecu.fr/stalkphish/

L’équipe du M82 project vous propose pour cette rentrée un retour aux sources avec : Coline C. (Sekoia.io) qui nous présentera "predator for hire" (lnkd.in/eXnYNwvc) Puis Sebastien Larinier (M82) sur "Stalkware, outils de la violence domestique " Inscriptions ici ⬇️ www.linkedin.com/posts/m82-pr...

✨ Batch N°2️⃣5️⃣0️⃣ of PhishingKit Yara rules! ✨ Rules for triage/detection/investigation on #phishing kits. This free and OpenSource project is now 8️⃣6️⃣0️⃣ Yara rules available! github.com/t4d/Phishing...

📢 New "workshop" section available on our GitHub repository. 🧩 Designed to publish the material presented during workshops, this repo is also an opportunity to replay these workshops yourself, at your own pace and when you have the time. 🔗 github.com/StalkPhish/w...

🌖 The event continued late into the night with #workshops dedicated to OSINT techniques for tracing #cryptocurrencies, investigating #phishing and scams, led by Tanguy Laucournet and Thomas Damonneville (@stalkphish.bsky.social).

🍿 New blog post: From Phishing Detection to Anti-Fraud Investigation 📌 At StalkPhish, our core business includes, among other things, #phishing detection. [...] 🔧 This wealth of data naturally opens the door to #anti-fraud investigations of remarkable precision. stalkphish.com/2025/07/06/f...

💡 Reminder: We will be running a workshop during leHACK, entitled “ Phishing detection and investigation with OSINT feeds and free softwares”. 🔧 W will focus on the use of open-source tools (StalkPhish-OSS, ClamAV, PhishingKit-Yara-rules, ...) 💥 Challenge accepted?

-Tracing cryptocurrencies with OSINT, led by Tanguy Laucournet from FuzzingLabs. - Detecting phishing campaigns through open-source data by @o0tad0o.bsky.social from @stalkphish.bsky.social

🚀 There's now 850 phishing kit yara rules available on our free and opensource project: github.com/t4d/Phishing... #phishing #yara #opensource

✨ PhishingKit Yara rules: 8️⃣3️⃣9️⃣ ruleZ! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Bankofamerica 📌 ​​​​​​​Snapchat 📌 Xfinity 📌 Comerica Bank 📌 Maybank Free and opensource project: github.com/t4d/Phishing... Project description: stalkphish.com/products/phi...

✨ Batch N°2️⃣4️⃣1️⃣ of PhishingKit Yara rules! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 ​​​​​​​American Express 📌 Cetelem 📌 FedEx 📌 Midland States Bank 📌 Royal Credit Union github.com/t4d/Phishing...

✨ New batch of PhishingKit Yara rules Rules for triage/detection of #phishing kits targetings users/customers of: 📌 E-ZPass IAG 📌 Huntington National Bank 📌 Charles Schwab 📌 Avida Finans AB 📌 SFR github.com/t4d/Phishing...

More PhishingKit Yara rules available on our repository: github.com/t4d/Phishing...

✨ 5️⃣ new PhishingKit Yara rules! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Visa 📌 Telstra 📌 MBH Bank 📌 Alibaba Group 📌 CaixaBank Find more on our #Opensource #Freesoftware repository: github.com/t4d/Phishing...

On vous attend !

📣 Meet Thomas Damonneville - our founder - at the #M3AAWG organized by the Messaging, Malware, Mobile Anti-Abuse Working Group in Lisbon next week for his presentation entitled: “Hunting for phishing URLs, kits and business”. 👋 In partnership with Signal Spam #phishing #phishingkit #cybersecurity

🚀 Hum, you know what? 📢 We've just reached 8️⃣0️⃣0️⃣ PhishingKit-Yara-Rules made freely available to everyone! ❓ These rules detect phishing kits targeting 3️⃣0️⃣0️⃣ of the world’s best-known brands and trade names. -> Check this: github.com/t4d/Phishing... #phishing #phishingkit #infosec #cyber

✨ New batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of phishing kits targeting users/customers of: 📌 Microsoft OneDrive 📌 Aramex 📌 Assurance Maladie 📌 Doctolib 📌 Generic email creds harvester (CN) 👉 Find these rules in our StalkPhish.io CTI product too!

New blog post: [Phishing kit] MonCompteFormation ‘Lead’ phishing kit – an analysis stalkphish.com/2025/01/17/p...

✨ Second batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of #phishing kits: 📌 AT&T 📌 PayPal 📌 SumUp 📌 SBB CFF FFS (SwissPass) 📌 Indonesiabaik.id This free and #OpenSource project is now: ✅ 7️⃣8️⃣7️⃣ Yara rules available! ✅ 2️⃣3️⃣0️⃣ Commits ✅ 5️⃣ years old -> github.com/t4d/Phishing...

[French] Analyse d'un kit de #phishing MonCompteFormation (CPF) avec l'aide de stalkphish.io:: www.linkedin.com/pulse/analys...

I was a bit bored this weekend... So here's a quick write-up on how I pivoted from one single SMS to more than 900 fraudulent phishing websites impersonating different brand such as @netflix.com and more. www.linkedin.com/posts/cperne... #cybercrime #phishing

🎣 A Zip package containing 10 phishing kits impersonating the following brands, found yesterday using StalkPhish.io :

24H of #phishing URLs impersonating USPS. Hundreds of domain names generated each day (detected by stalkphish.io):

🔥 5 new PhishingKit Yara rules, dedicated to detect phishing kits impersonating: ✅ Ledger ✅ Nickel ✅ Telegram Messenger ✅ PayPal ✅ Elster 👉 There is now 7️⃣7️⃣3️⃣ Yara rules available for free. github.com/t4d/Phishing... #Phishing #phishingkit #fraud #SOC #CSIRT #yara #stalkphish #freesoftware

Hi there \o/