Twitxy
Saved
@PhishCore's profile picture
View on X

PhishCore™️

Verified account This account is verified. Learn more

@PhishCore

The phishing simulation platform built by red teamers. Emulate real attacks. Measure resilience. ↓ Join the waitlist
phishcore.io Joined April 2025
15 Following 1.8K Followers 196 Posts

Latest posts 5

Pinned post

PhishCore™️ Verified account @PhishCore
We're officially introducing PhishCore.

PhishCore helps organizations test, measure, and improve their defenses against phishing attacks using realistic simulations and security awareness training.

We’re currently building the platform and have opened a waitlist for early adopters.

If you’re interested, sign up for the waitlist:

phishcore.io

We’re building in public and will share more updates soon.
3 replies 15 reposts 79 likes 836K views View on X
PhishCore™️ Verified account @PhishCore
Hijacked whatsapp accounts are sending files named "Statement of Account[.]zip", "Invoice.iso" and "Salary Revision.rar" to every contact on the list. You open it because it came from your colleague, your vendor, your brother.

Open it on a windows pc and it can log keystrokes, take screenshots and hand over remote access. Then your account becomes the next sender.

Kaspersky tracked one version across 11 countries. Singapore's cert and police both issued warnings in the last two weeks.

these are the same lures that hit inboxes every month. the only thing that changed is the channel.

if your team only learns to distrust strangers, they're trained for the wrong attack. The dangerous message comes from someone they already trust.
PhishCore™️ Verified account @PhishCore
🚨 CYBERSECURITY ALERT: ₦50,000 SUPPORT SCAMS ARE CIRCULATING.

Scammers are already exploiting the Federal Government's ₦50,000 relief intervention to target unsuspecting Nigerians.

Fake registration portals, WhatsApp broadcasts and suspicious links are being circulated under the promise of financial assistance.

Before you click that link, understand this:

The Federal Government's National Emergency Relief and Stabilisation Intervention (NERSI) is a real programme. However, it is intended for selected, verified beneficiaries, not an open registration exercise where everyone can apply through a random link.

According to the programme's official safety guidance:

Beneficiaries are contacted through approved payment providers.
The programme does not send links to claim the support.
You do not need to pay a registration or processing fee.
Nobody should ask for your OTP, PIN or password.
Nobody can sell you a place on the beneficiary list.

Protect yourself:

Don't click random ₦50,000 grant links shared on WhatsApp, Facebook or Telegram.
Never enter your BVN, NIN, bank details, card information or login credentials on an unverified website.
Don't forward suspicious registration links to friends and family.
Verify announcements through official government channels.
If you've already submitted sensitive information, contact your bank immediately and secure your accounts.

Stay alert. Verify before you trust. Think before you click.

PhishCore
Building the Human Defense Layer.

#PhishCore #CyberSecurity #PhishingAwareness #Nigeria #StayCyberSafe
PhishCore™️ Verified account @PhishCore
$6.34 billion, and no email involved.

a fake recruiter, fake HR call over video, fake CEO, then a take-home assignment to download onto a work laptop.

it’s the same playbook as an email attack, run in a different place. Build trust, create a reason to act, get them to open the file.

HR even shared their personal photos and videos to seem real. Binance says it was the most convincing social engineering it had seen.

Attackers aren’t only looking for one engineer to fail. they’re looking for the one who’s job hunting, or eager, or helpful, or tired.

if your awareness program only teaches people to spot a bad sender address, it leaves out what this attack actually used: A believable story.

Your engineers are being recruited and some of the recruiters aren’t real.
IT Guy Verified account @T3chFalcon Nov 3
Binance just published how $6.34 billion walked out the door.

June: an engineer searches for a popular AI coding tool, clicks a search result, and installs a tampered homebrew. Binance catches it, replaces the laptop, rotates the credentials. the attackers now know who works on the wallet team.

September: another engineer gets a job offer on a real job-hunting site. first-round interview with “HR” over live video. “HR” shares their social media, personal photos and videos included, so he trusts them. second round is with the “CEO” of a company that doesn’t exist. at the end of the call he’s asked to download a take-home “assignment” onto his work laptop.

the assignment quietly swaps out pyenv for a malicious copy. No antivirus flags it.

october 20: the attacker uses binance’s own internal AI tool to get into two more engineers’ machines. One of them has a container deployment token sitting on his laptop.

october 29: container deployed. Signing service reached. $6.34 billion moved.

Binance shut off withdrawals. the money kept moving anyway, because the attacker had already given their own smart contract permission over a hot wallet, on-chain. binance’s off switch didn’t reach that far.

then they tried to revoke the permission. the wallet uses MPC, so there’s no single private key to sign the revoke with. they had to build a revoke procedure on the spot while funds were still leaving.

last stolen ETH went through at 23:56 UTC. almost four hours after the first transfer.

Phew!
View quoted post on X