Big Phishers Eat Little Phishers

N00bz being pwnd. It really doesn’t matter what game it is, it always makes me laugh. In this case, a phisher known as Mr-Brain has created a website that has lots of phishing toolkits free for the taking. The catch is that hidden in the code, encrypted and obfuscated, is the real email address that the phishing toolkits will use to send the stolen data to. The N00bz do the work, do the spamming, and maybe even take the fall from the cops. Its lulzy.

From PCWorld here, via Netcraft here:

In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims– aspiring Internet scammers.

A Moroccan group called “Mr. Brain” is offering free phishing kits on a Web site hosted in France.

The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal and HSBC.

Mr. Brain’s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.

But what the aspiring scammer doesn’t know is that the phishing kits are designed to send any sensitive information that’s collected back to e-mail accounts controlled by Mr. Brain.

Phishers pwn phraudsters. And security researchers pwn phishers. The world is a beautiful place.