So Long, and Thanks for All the Phish - Infiltrating a Global Phishing-as-a-Service Operation

Explore the inner workings of a global phishing-as-a-service operation through this 36-minute DEF CON 33 conference talk by Harrison Sand and Erlend Leiknes. Discover how security researchers successfully infiltrated a sophisticated phishing group, reverse-engineered their malicious software, and exploited a previously unknown backdoor within their systems. Learn about the methodical OSINT investigation techniques that led to uncovering the real identity of the operation's primary software developer. Gain insights into the structure and operations of modern phishing-as-a-service platforms, understand the technical methods used to analyze and compromise criminal infrastructure, and see how open-source intelligence gathering can be leveraged to trace cybercriminals. This presentation provides a rare behind-the-scenes look at both the criminal ecosystem and the investigative techniques used to combat it.