A deep technical analysis of the Smishing Triad’s JWR phishing kit and Outsider operator cluster, revealing its real-time victim control, encrypted WebSocket communications, multi-stage credential theft, AES-256-CTR implementation, infrastructure, and actionable indicators for defenders.
Smish. Click. Drained: Inside the Smishing Triad’s Phishing Cockpit
About this summary. This is a short, independently written summary of an article first published by Group-IB. Cyber Security News did not report or verify the underlying story. Read the original: https://www.group-ib.com/blog/smishing-triad-outsider-jwr/
Source attribution: headline and facts are from Group-IB (group-ib.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of…
FBI agents’ blood tests and doctors’ notes surface after breach
BBC News reports it has seen samples of stolen FBI agents’ medical examinations. The “fitness-for-work” reports identify FBI agents by name and address, and reveal even…
A week in security (September 21 – September 27)
Last week on Malwarebytes Labs: LinkedIn adds new checks for fake profiles and work histories Kothamine malware uses Tailscale’s tailcat to evade network detection…
A Large-Scale Empirical Study of Modern Phishing Email Content
arXiv:2609.30683v1 Announce Type: new Abstract: Phishing remains one of the most pervasive threats to Internet users, and email remains its predominant delivery channel…
Quarantined isn't contained: Agentic phishing response with Elastic and Sublime
Critical signals still land in different security tools, so early signs of a campaign might go unnoticed. That visibility gap is getting more expensive as attackers…
Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new…