Thomas Damonneville explained yesterday on the french television evening news why the number of phishing sites pretending to be parcel delivery services would increase as the end-of-year festivities approached. Based on StalkPhish.io data.

💾 Here is an excerpt from the names of databases used by French scammers to target European citizens. These databases are consolidated and made available to their customers via Telegram bots for a few crypto-milli-coins to target victims more accurately and approach them with greater authority.

💡 #phishing investigation/monitoring use case for the StalkPhish.io API: ➡️ Use "ipv4" API endpoint to retrieve information about IP address hosting phishing pages (args: 223.29.226.200, from_date=2025-11-01&to_date=2025-11-09, extract)

Today, we’re excited to share details about the enhanced StalkPhish.io' #API that brings powerful search capabilities and real-time threat intelligence directly to your security workflows. stalkphish.com/2025/11/05/s... #phishing #scam #fraud

📝 Le marché des "fiches" en pleine expansion sur les réseaux d'arnaqueurs. 🧩 Tirées des fuites de données massives, ces "fiches" consolident, dans une même base de données, les informations personnelles de millions de français.e.s. ➡️ Plus d'information ici: stalkphish.com/2025/09/15/s...

🔥 Destiné à contourner les filtres anti-phishing, l'𝐀𝐏𝐏𝐄𝐋 𝐄𝐍𝐓𝐑𝐀𝐍𝐓 est une des transformations majeures du scam francophone ces derniers mois: pour créer un sentiment d'urgence, et même éviter d'avoir à déployer un site de #phishing! 👉 Lire notre dernier article: stalkphish.com/2025/09/15/s...

🔥 La désormais classique arnaque par SMS "bonjour vous etes chez vous?", destinée à: ➡️ appeler à engager l'échange ➡️ conditionner la potentielle victime à donner de l'information ➡️ router la victime vers une page de phishing dédiée à la récupération d'informations bancaires et personnelles

📢 Nouvel article sur le blog de @stalkphish.bsky.social "Smishing à la française, collection Automne-Hiver 2025-2026" 🔎 Nouvelles techniques et tactiques utilisées par les scammers francophones ces derniers mois. stalkphish.com/2025/09/15/s...

#Podcast #Cybersécurité Épisode #512 consacré à @stalkphish.bsky.social, avec @o0tad0o.bsky.social www.nolimitsecu.fr/stalkphish/

L’équipe du M82 project vous propose pour cette rentrée un retour aux sources avec : Coline C. (Sekoia.io) qui nous présentera "predator for hire" (lnkd.in/eXnYNwvc) Puis Sebastien Larinier (M82) sur "Stalkware, outils de la violence domestique " Inscriptions ici ⬇️ www.linkedin.com/posts/m82-pr...

✨ Batch N°2️⃣5️⃣0️⃣ of PhishingKit Yara rules! ✨ Rules for triage/detection/investigation on #phishing kits. This free and OpenSource project is now 8️⃣6️⃣0️⃣ Yara rules available! github.com/t4d/Phishing...

📢 New "workshop" section available on our GitHub repository. 🧩 Designed to publish the material presented during workshops, this repo is also an opportunity to replay these workshops yourself, at your own pace and when you have the time. 🔗 github.com/StalkPhish/w...

🌖 The event continued late into the night with #workshops dedicated to OSINT techniques for tracing #cryptocurrencies, investigating #phishing and scams, led by Tanguy Laucournet and Thomas Damonneville (@stalkphish.bsky.social).

🍿 New blog post: From Phishing Detection to Anti-Fraud Investigation 📌 At StalkPhish, our core business includes, among other things, #phishing detection. [...] 🔧 This wealth of data naturally opens the door to #anti-fraud investigations of remarkable precision. stalkphish.com/2025/07/06/f...

💡 Reminder: We will be running a workshop during leHACK, entitled “ Phishing detection and investigation with OSINT feeds and free softwares”. 🔧 W will focus on the use of open-source tools (StalkPhish-OSS, ClamAV, PhishingKit-Yara-rules, ...) 💥 Challenge accepted?

-Tracing cryptocurrencies with OSINT, led by Tanguy Laucournet from FuzzingLabs. - Detecting phishing campaigns through open-source data by @o0tad0o.bsky.social from @stalkphish.bsky.social

🚀 There's now 850 phishing kit yara rules available on our free and opensource project: github.com/t4d/Phishing... #phishing #yara #opensource

✨ PhishingKit Yara rules: 8️⃣3️⃣9️⃣ ruleZ! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Bankofamerica 📌 ​​​​​​​Snapchat 📌 Xfinity 📌 Comerica Bank 📌 Maybank Free and opensource project: github.com/t4d/Phishing... Project description: stalkphish.com/products/phi...

✨ Batch N°2️⃣4️⃣1️⃣ of PhishingKit Yara rules! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 ​​​​​​​American Express 📌 Cetelem 📌 FedEx 📌 Midland States Bank 📌 Royal Credit Union github.com/t4d/Phishing...

✨ New batch of PhishingKit Yara rules Rules for triage/detection of #phishing kits targetings users/customers of: 📌 E-ZPass IAG 📌 Huntington National Bank 📌 Charles Schwab 📌 Avida Finans AB 📌 SFR github.com/t4d/Phishing...

More PhishingKit Yara rules available on our repository: github.com/t4d/Phishing...

✨ 5️⃣ new PhishingKit Yara rules! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Visa 📌 Telstra 📌 MBH Bank 📌 Alibaba Group 📌 CaixaBank Find more on our #Opensource #Freesoftware repository: github.com/t4d/Phishing...

On vous attend !

📣 Meet Thomas Damonneville - our founder - at the #M3AAWG organized by the Messaging, Malware, Mobile Anti-Abuse Working Group in Lisbon next week for his presentation entitled: “Hunting for phishing URLs, kits and business”. 👋 In partnership with Signal Spam #phishing #phishingkit #cybersecurity

🚀 Hum, you know what? 📢 We've just reached 8️⃣0️⃣0️⃣ PhishingKit-Yara-Rules made freely available to everyone! ❓ These rules detect phishing kits targeting 3️⃣0️⃣0️⃣ of the world’s best-known brands and trade names. -> Check this: github.com/t4d/Phishing... #phishing #phishingkit #infosec #cyber

✨ New batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of phishing kits targeting users/customers of: 📌 Microsoft OneDrive 📌 Aramex 📌 Assurance Maladie 📌 Doctolib 📌 Generic email creds harvester (CN) 👉 Find these rules in our StalkPhish.io CTI product too!

New blog post: [Phishing kit] MonCompteFormation ‘Lead’ phishing kit – an analysis stalkphish.com/2025/01/17/p...

✨ Second batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of #phishing kits: 📌 AT&T 📌 PayPal 📌 SumUp 📌 SBB CFF FFS (SwissPass) 📌 Indonesiabaik.id This free and #OpenSource project is now: ✅ 7️⃣8️⃣7️⃣ Yara rules available! ✅ 2️⃣3️⃣0️⃣ Commits ✅ 5️⃣ years old -> github.com/t4d/Phishing...

[French] Analyse d'un kit de #phishing MonCompteFormation (CPF) avec l'aide de stalkphish.io:: www.linkedin.com/pulse/analys...

I was a bit bored this weekend... So here's a quick write-up on how I pivoted from one single SMS to more than 900 fraudulent phishing websites impersonating different brand such as @netflix.com and more. www.linkedin.com/posts/cperne... #cybercrime #phishing

🎣 A Zip package containing 10 phishing kits impersonating the following brands, found yesterday using StalkPhish.io :

24H of #phishing URLs impersonating USPS. Hundreds of domain names generated each day (detected by stalkphish.io):

🔥 5 new PhishingKit Yara rules, dedicated to detect phishing kits impersonating: ✅ Ledger ✅ Nickel ✅ Telegram Messenger ✅ PayPal ✅ Elster 👉 There is now 7️⃣7️⃣3️⃣ Yara rules available for free. github.com/t4d/Phishing... #Phishing #phishingkit #fraud #SOC #CSIRT #yara #stalkphish #freesoftware

Hi there \o/