Exploit-DB RSS Feed

Reddit NetSec

AlienVault OTX General

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

CVE Database V5

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Phishing targeting Luxembourg services (hosted and served on/from AWS)

This threat involves a phishing campaign specifically targeting services related to Luxembourg, with the phishing infrastructure hosted and served from Amazon Web Services (AWS). The attack technique employed is a classic phishing method (MITRE ATT&CK T1566), where attackers create fake websites designed to impersonate legitimate Luxembourg-based services. These fake websites aim to deceive users into divulging sensitive information such as login credentials, personal data, or financial details. The psychological acceptability of the phishing attempt is rated high, indicating that the phishing pages are crafted to appear highly credible and trustworthy, increasing the likelihood of user interaction and successful credential harvesting. The campaign leverages the cloud infrastructure of AWS, which can provide attackers with scalable and resilient hosting, making takedown efforts more challenging. Although no specific affected software versions or patches are identified, the threat remains persistent and perpetual, as indicated by the OSINT lifetime tag. No known exploits in the wild have been reported, but the medium severity rating reflects the potential risk posed by successful phishing attempts, which can lead to unauthorized access, data breaches, and subsequent lateral movement within targeted organizations.

Detailed information about Phishing targeting Luxembourg services (hosted and served on/from AWS). Get real-time updates, technical details, and mitigation stra

Phishing targeting Luxembourg services (hosted and served on/from AWS) - Live Threat Intelligence - Threat Radar | OffSeq.com

This threat describes a phishing campaign targeting services related to Luxembourg, with the phishing infrastructure hosted and served from Amazon Web Services (AWS). The campaign employs fake websites designed to impersonate legitimate Luxembourg services, leveraging psychological acceptability to increase the likelihood of victim interaction. The attack technique aligns with the MITRE ATT&CK pattern T1566, which involves phishing as a vector to gain unauthorized access or steal sensitive information. The campaign is characterized by its use of convincing fake websites, which may deceive users into divulging credentials or other sensitive data. The hosting on AWS suggests attackers are leveraging cloud infrastructure to rapidly deploy and scale their phishing sites, potentially evading some traditional detection methods due to the legitimate nature of AWS IP ranges. No specific affected software versions or patches are noted, indicating this is a social engineering threat rather than a software vulnerability. The campaign is ongoing and considered to have a medium severity level by the source, CIRCL. There are no known exploits in the wild beyond the phishing campaign itself, and no direct technical vulnerabilities are exploited, but the risk lies in user deception and credential compromise.

Title	Severity	Type	Source	Date

Threats Tagged 'phishing:psychological-acceptability="high"'

Filter Threats