OpenBait @openbait

Phishing site check and takedown. Paste a link, get an answer in seconds; confirmed sites go to the blocklists, the host and the registrar. openbait.com Hong Kong Joined March 2026

Tweets

8
Followers

1K
Following

23
Likes

0

Cyber Security News @The_Cyber_News

a week ago

🛡️ Local AI Model Modifies Windows Credential Dumper to Bypass EDR Detection Details: cybersecuritynews.com/local-ai-bypas… A locally hosted, uncensored artificial intelligence model modified a Windows credential-dumping utility until it evaded two Endpoint Detection and Response (EDR) products in a controlled lab, highlighting how accessible generative AI could accelerate custom offensive-tool development. The researcher validated the resulting dump with pypykatz, confirming it could be parsed, but the initial executable still triggered EDR detection. When asked to improve stealth, DeepSeek invoked a safety guardrail. Zhang therefore moved the code to an uncensored, community-modified Qwen 3.8 27B model, running locally on a password-cracking rig equipped with two Nvidia RTX 4090 graphics cards. #cybersecuritynews

0 14 71 5K 9

View Details

Microsoft Threat Intelligence @MsftSecIntel

2 weeks ago

Since emerging in February 2026, EvilTokens quickly became one of the most widely used phishing-as-a-service (PhaaS) platforms, enabling sophisticated device code phishing campaigns aimed at compromising organizational accounts at scale. msft.it/6015a50C3

6 31 97 12K 52

View Details

Infobae En Vivo @infobaenvivo

3 weeks ago

🟠 QUÉ ES EL SMISHING: LA NUEVA MODALIDAD DE ESTAFA Mandan un SMS por las vías oficiales de las compañías de teléfono, que son interferidas, con un engaño de supuestos premios por puntos. De esta forma, te terminan sacando los datos de la tarjeta.

18 386 925 79K 437

View Details

OpenBait @openbait

2 weeks ago

What stuck was at the registrar, not the host. Three of the five storefront domains ended up suspended or on a suspension page. Three of the four card-collection domains are still live. The servers were disposable. The domains were the asset.

0 0 0 5 0

View Details

OpenBait @openbait

2 weeks ago

How we caught it: a TLS handshake to the same server with an invented hostname got an instant error. With the clone's own hostname it sent zero bytes and hung. A site that has really been removed completes the handshake and then serves an error. One that hangs is filtering you.

1 0 0 7 0

View Details

OpenBait @openbait

2 weeks ago

We told a client five clone shops of their store were offline. One was still taking card numbers from US visitors. All our probes ran from one country; the site answered some networks and played dead for others. The whole case, hour by hour: openbait.com/blog/clone-sho…