News for hackers. Stuff that matters.

A comment on Israeli Cyber Experts Uncover Attack on 85,000 MySQL Servers. Parent comment

Re:Israeli Cyber Experts Uncover Attack on 85,000 MySQL Servers by 1cvmask on Thursday December 24, 2020 @12:21AM (#25525256)
Do the crooks forget to add favicons to their phishing sites?

Favicons can be a single image or multiple images.

Here is a good recent thread on it on HN. Will put the map there as well come to think of it.

https://news.ycombinator.com/item?id=25520655

[ Parent | on HN ]
Re:Israeli Cyber Experts Uncover Attack on 85,000 MySQL Servers by achillean on Thursday December 24, 2020 @02:32AM (#25525715)
No, very often they do add the favicons! That makes it easier to locate websites that are outside of your expected IP space but are pretending to belong to you. For example:

https://beta.shodan.io/search?query=http.favicon.hash%3A7085...

It takes a bit more refining to get a good list of results; the general idea is to find websites that look like the real deal but are located somewhere on the Internet where you didn't expect to find them.

[ Parent | on HN ]