Apple iCloud phishing campaign INVOLVES credential harvesting
The cloned iCloud page captured usernames and passwords in clear text.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“it would save that in clear text so the hacker could see it”
Technique
technique:credential_harvesting
Also: credential capture
Collection of usernames and passwords through cloned login pages that save submitted credentials in clear text.
Collection of usernames and passwords through cloned login pages that save submitted credentials in clear text.
“it would save that in clear text so the hacker could see it”
Collection of credentials through a deceptive landing page during a phishing engagement.
“I will set up a landing page that is to collect credentials”
“I’m able to capture those credentials”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | Apple iCloud phishing campaign | Explicit | 34 |
| incoming | USES | Alethe Denis | Explicit | 107 |
Apple iCloud phishing campaign INVOLVES credential harvesting
The cloned iCloud page captured usernames and passwords in clear text.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“it would save that in clear text so the hacker could see it”
Alethe Denis USES credential harvesting
In phishing engagements, Alethe sets up pages to collect credentials and tests whether she can capture them.
Explicit Confidence 99% · Alethe Denis EP 107 Details
“I will set up a landing page that is to collect credentials”