Wise Phishermen Never Trust The Weather - Advanced Anti-Phishing Techniques and Evasion Methods

Explore advanced phishing techniques and anti-phishing defense mechanisms in this 42-minute conference talk from x33fcon. Discover novel anti-phishing approaches encountered over the past year and learn how modern attackers bypass these protections using sophisticated tools like Evilginx Pro. Examine how new anti-phishing techniques are implemented across multiple areas including URL scanning for malicious links, client-side browser extensions, and third-party canaries for real-time phishing detection. Dive deep into the mechanics of various anti-phishing defense systems and understand their operational principles. Witness live demonstrations showing how these defenses can be circumvented or broken by advanced phishing software. Gain insights into innovative attacker tactics that make defenders' jobs increasingly challenging, including reverse proxy phishing techniques such as media content re-hashing, HTML obfuscation, and browser-in-the-browser phishing methods. Learn how attackers can upgrade their strategies to create more effective phishing campaigns while staying ahead of current security measures.