Skip to main content
CampaignPublished

FlowerStorm Phishing Kit Targeting Microsoft Credentials via Cloudflare-Backed Infrastructure

Source AlienVault OTX General

0

Description

IOCs related to FlowerStorm phishing‑kit–driven campaign that delivers fake Microsoft authentication pages via compromised domains fronted by Cloudflare. The activity abuses legitimate cloud and CDN services for delivery while credential harvesting occurs on attacker‑controlled infrastructure, with incidental contact to Microsoft services during normal browser behavior.that uses its own web servers to target victims' login credentials and access to their personal details and login details on its servers.

Indicators of compromise

Domains 7

  • boysgirlsclubchester.continuousperformance.de
  • chestersuplandsd.continuousperformance.de
  • chesteruplandsd.continuousperformance.de
  • delcofamilyvillage.continuousperformance.de
  • fleschlawfirm.continuousperformance.de
  • jbsafetyintl.continuousperformance.de
  • stevenscollege.continuousperformance.de

Community reviews

Loading reviews…