Phishing in a Nutshell: January – March 2018
Summary: Unit 42 found 4,213 phishing URLs across 262 unique domains in the first quarter of 2018, with one domain serving 16 different phishing URLs on average and over half of the domains hosted in the United States. Of those URLs, 1,010 were HTTPS from 46 unique domains, and cPanel issued certificates for 31 of those domains, with COMODO and Let's Encrypt each issuing certificates for 6.
Why it matters: Roughly a quarter of the phishing URLs in this sample used HTTPS, and 31 of the 46 certificate-bearing domains got their certs from a single issuer, cPanel - so the padlock and the certificate chain that users and filters lean on were doing nothing to separate these pages from legitimate ones.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026