Morphing Meerkat leads sophisticated phishing operation

Morphing Meerkat leads sophisticated phishing operation

A new cyber threat, led by the actor known as Morphing Meerkat, is exploiting DNS records to launch sophisticated phishing attacks on over 100 brands.

Infoblox has unmasked a phishing-as-a-service platform that uses DNS mail exchange records to mimic login pages of more than 100 brands.

Infoblox Threat Intel has identified a particularly sophisticated Phishing-as-a-Service (PhaaS) platform, representing a major threat to companies around the world. Named Morphing Meerkat, this malicious platform is ingeniously exploiting the DNS Mail Exchange (MX) records to dynamically generate fake login pages and thus steal victims' login identifiers. When a victim clicks on a phishing link, the kit checks the email domain's MX recording to …