iiinova — where your digital self keeps evolving

-= StalkPhish =- @stalkphish.bsky.social · 11/09/2026

Last night, Thomas Damonneville explained, on the prime-time show @cashinvestigation.bsky.social, certain recent techniques used by French scammers, particularly the use of inbound calls and how the call centers are set up. youtu.be/_e6CTGbSISE?...

Thomas Damonneville (StalkPhish) on Cash Investigation

010

-= StalkPhish =- @stalkphish.bsky.social · 10/07/2026

🎣 Coming soon: StalkPhish Phishing URL Scanner, powered by our own engine. For years at StalkPhish, we've been collecting, dissecting and tracking phishing kits and the infrastructure behind them. We've turned that knowledge into a tool... and it's almost ready!

StalkPhish phishing URL scanner... coming soon!

022

-= StalkPhish =- @stalkphish.bsky.social · 04/05/2026

📕 Le Dico du scam is now available online, opensource and waiting for your pull-requests :) 🔎 At StalkPhish, we analyze French-language scam channels, and cybercriminal forums on a daily basis. Over time, we’ve compiled a glossary of the slang used in these networks. github.com/StalkPhish/d...

github.com

GitHub - StalkPhish/dico-du-scam: Collaborative glossary of slang used in French-speaking scam and phishing networks — Threat Intelligence / SOC / CERT

Collaborative glossary of slang used in French-speaking scam and phishing networks — Threat Intelligence / SOC / CERT - StalkPhish/dico-du-scam

022

Reposted by -= StalkPhish =-

.:: tAd ::. @o0tad0o.bsky.social · 14/04/2026

🥳 I'm really excited to be at #Botconf again this year! See you there, friends! I'm bringing back some handmade goodies!

023

-= StalkPhish =- @stalkphish.bsky.social · 13/03/2026

👉 You can get a refund too! "Yeah, but what?" "I don't know." "But from whom?" "I don't know." 🤔 But it'll be quick, since your bank details are being broadcast live on the scammer's Telegram channel...

000

-= StalkPhish =- @stalkphish.bsky.social · 09/03/2026

😤 Yeah that's right, stop scam-baiting the scammers! Everyone already knows about this scam! ... it's been implemented in the PhishingKit-Yara-Rules project for detection since... January 2025! This is outrageous!!!!

121

Reposted by -= StalkPhish =-

-= StalkPhish =- @stalkphish.bsky.social · 04/03/2026

🚀 It's live. The Web Search on StalkPhish.io is now available - no account, no API key, no friction. Search by URL, domain, or IP address and get instant phishing intelligence from our threat database, covering the last 7 days of activity. 👉 Try it now stalkphish.io #ThreatIntelligence #Phishing

022

-= StalkPhish =- @stalkphish.bsky.social · 04/03/2026

022

Reposted by -= StalkPhish =-

.:: tAd ::. @o0tad0o.bsky.social · 16/02/2026

Mardi 31 mars 2026 j'interviendrai durant la conférence #CoRIIN pour présenter les nouvelles techniques utilisées par les scammers français ces derniers mois. www.cecyf.fr/coriin/corii...

cecyf.fr

CoRIIN 2026 – CECyF

011

-= StalkPhish =- @stalkphish.bsky.social · 08/02/2026

🤔 It is common to uncover entire infrastructures dedicated to scams. StalkPhish .io can detect these infrastructures in order to monitor them and prevent future waves of scams. 🔥 Knowledge is power. -- Contact us for more details or visit stalkphish.io

000

-= StalkPhish =- @stalkphish.bsky.social · 26/01/2026

🎣 Following scammers with StalkPhish.io Using Telegram data collected by StalkPhish probes, it's possible to pivot from a single phishing to an entire threat actor's ecosystem: Attackers' poor OPSEC+the right tools = actionable intelligence. 🔗 Need help with an investigation? Visit stalkphish .io

From Telegram Stalkphish.io API endpoint data... to scam business

012

-= StalkPhish =- @stalkphish.bsky.social · 09/01/2026

😅 digging into 10 days of scammers Telegram data stored into stalkphish.io DB... Gonna applied some filters!

011

-= StalkPhish =- @stalkphish.bsky.social · 31/12/2025

4️⃣ figures to present the results of the work carried out by StalkPhish, dedicated to hunting down phishing, fraud, and those involved in these activities.

011

-= StalkPhish =- @stalkphish.bsky.social · 29/12/2025

✨️ Batch N°2️⃣5️⃣5️⃣ of PhishingKit Yara rules! ✨️ 👉️ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Netflix 📌 ANTAI 📌 Itaú Unibanco 📌 M&T Bank 📌 Nedbank This free and #OpenSource project is now 8️⃣7️⃣️5️⃣ Yara rules available! github.com/t4d/Phishing...

021

-= StalkPhish =- @stalkphish.bsky.social · 28/12/2025

🚀 New @StalkPhish .io Plans. Try Free for 7 Days We're excited to announce two new subscription plans on StalkPhish .io, designed to better fit your phishing detection needs. ➡️ Starter : Ideal for your first steps in threat monitoring. ➡️ Researcher : Built for security researchers and power users.

021

-= StalkPhish =- @stalkphish.bsky.social · 26/11/2025

Thomas Damonneville explained yesterday on the french television evening news why the number of phishing sites pretending to be parcel delivery services would increase as the end-of-year festivities approached. Based on StalkPhish.io data.

Thomas Damonneville presenting StalkPhish.io data about parcel scams

011

-= StalkPhish =- @stalkphish.bsky.social · 21/11/2025

💾 Here is an excerpt from the names of databases used by French scammers to target European citizens. These databases are consolidated and made available to their customers via Telegram bots for a few crypto-milli-coins to target victims more accurately and approach them with greater authority.

011

-= StalkPhish =- @stalkphish.bsky.social · 10/11/2025

💡 #phishing investigation/monitoring use case for the StalkPhish.io API: ➡️ Use "ipv4" API endpoint to retrieve information about IP address hosting phishing pages (args: 223.29.226.200, from_date=2025-11-01&to_date=2025-11-09, extract)

011

-= StalkPhish =- @stalkphish.bsky.social · 05/11/2025

Today, we’re excited to share details about the enhanced StalkPhish.io' #API that brings powerful search capabilities and real-time threat intelligence directly to your security workflows. stalkphish.com/2025/11/05/s... #phishing #scam #fraud

021

-= StalkPhish =- @stalkphish.bsky.social · 08/10/2025

📝 Le marché des "fiches" en pleine expansion sur les réseaux d'arnaqueurs. 🧩 Tirées des fuites de données massives, ces "fiches" consolident, dans une même base de données, les informations personnelles de millions de français.e.s. ➡️ Plus d'information ici: stalkphish.com/2025/09/15/s...

011

-= StalkPhish =- @stalkphish.bsky.social · 01/10/2025

🔥 Destiné à contourner les filtres anti-phishing, l'𝐀𝐏𝐏𝐄𝐋 𝐄𝐍𝐓𝐑𝐀𝐍𝐓 est une des transformations majeures du scam francophone ces derniers mois: pour créer un sentiment d'urgence, et même éviter d'avoir à déployer un site de #phishing! 👉 Lire notre dernier article: stalkphish.com/2025/09/15/s...

stalkphish.com

Smishing à la française, collection Automne-Hiver 2025-2026

Nouvelles techniques de smishing utilisées par les scammers francophones depuis début 2025 pour escroquer leurs victimes.

022

-= StalkPhish =- @stalkphish.bsky.social · 22/09/2025

🔥 La désormais classique arnaque par SMS "bonjour vous etes chez vous?", destinée à: ➡️ appeler à engager l'échange ➡️ conditionner la potentielle victime à donner de l'information ➡️ router la victime vers une page de phishing dédiée à la récupération d'informations bancaires et personnelles

111

Reposted by -= StalkPhish =-

.:: tAd ::. @o0tad0o.bsky.social · 18/09/2025

📢 Nouvel article sur le blog de @stalkphish.bsky.social "Smishing à la française, collection Automne-Hiver 2025-2026" 🔎 Nouvelles techniques et tactiques utilisées par les scammers francophones ces derniers mois. stalkphish.com/2025/09/15/s...

stalkphish.com

Smishing à la française, collection Automne-Hiver 2025-2026

Nouvelles techniques de smishing utilisées par les scammers francophones depuis début 2025 pour escroquer leurs victimes.

011

Reposted by -= StalkPhish =-

M82 @m82.eurosky.social · 07/09/2025

L’équipe du M82 project vous propose pour cette rentrée un retour aux sources avec : Coline C. (Sekoia.io) qui nous présentera "predator for hire" (lnkd.in/eXnYNwvc) Puis Sebastien Larinier (M82) sur "Stalkware, outils de la violence domestique " Inscriptions ici ⬇️ www.linkedin.com/posts/m82-pr...

linkedin.com

Les rencontres de la grenouille #0925 | M82 project

L’équipe du M82 project vous propose pour cette rentrée et pour lancer notre "saison 3" un retour aux sources avec : Coline C. (Sekoia.io) qui nous présentera "predator for hire" une plongée dans le m...

071

-= StalkPhish =- @stalkphish.bsky.social · 03/09/2025

✨ Batch N°2️⃣5️⃣0️⃣ of PhishingKit Yara rules! ✨ Rules for triage/detection/investigation on #phishing kits. This free and OpenSource project is now 8️⃣6️⃣0️⃣ Yara rules available! github.com/t4d/Phishing...

111

-= StalkPhish =- @stalkphish.bsky.social · 15/07/2025

📢 New "workshop" section available on our GitHub repository. 🧩 Designed to publish the material presented during workshops, this repo is also an opportunity to replay these workshops yourself, at your own pace and when you have the time. 🔗 github.com/StalkPhish/w...

011

Reposted by -= StalkPhish =-

Epieos @epieos.com · 30/06/2025

🌖 The event continued late into the night with #workshops dedicated to OSINT techniques for tracing #cryptocurrencies, investigating #phishing and scams, led by Tanguy Laucournet and Thomas Damonneville (@stalkphish.bsky.social).

142

-= StalkPhish =- @stalkphish.bsky.social · 07/07/2025

🍿 New blog post: From Phishing Detection to Anti-Fraud Investigation 📌 At StalkPhish, our core business includes, among other things, #phishing detection. [...] 🔧 This wealth of data naturally opens the door to #anti-fraud investigations of remarkable precision. stalkphish.com/2025/07/06/f...

stalkphish.com

From Phishing Detection to Anti-Fraud Investigation

Our Expertise at the Heart of Cybersecurity At StalkPhish, our core business includes, among other things, phishing detection. Every day we detect, enrich, and sort tens of thousands of phishing UR…

011

-= StalkPhish =- @stalkphish.bsky.social · 28/06/2025

💡 Reminder: We will be running a workshop during leHACK, entitled “ Phishing detection and investigation with OSINT feeds and free softwares”. 🔧 W will focus on the use of open-source tools (StalkPhish-OSS, ClamAV, PhishingKit-Yara-rules, ...) 💥 Challenge accepted?

001

Reposted by -= StalkPhish =-

Sylvain HAJRI @navlys.bsky.social · 20/06/2025

-Tracing cryptocurrencies with OSINT, led by Tanguy Laucournet from FuzzingLabs. - Detecting phishing campaigns through open-source data by @o0tad0o.bsky.social from @stalkphish.bsky.social

133

-= StalkPhish =- @stalkphish.bsky.social · 29/05/2025

✨ PhishingKit Yara rules: 8️⃣3️⃣9️⃣ ruleZ! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Bankofamerica 📌 Snapchat 📌 Xfinity 📌 Comerica Bank 📌 Maybank Free and opensource project: github.com/t4d/Phishing... Project description: stalkphish.com/products/phi...

stalkphish.com

PhishingKit-Yara-Rules

YARA rules collection set based on phishing kits analysis. To boost your phishing kits triage.

000

-= StalkPhish =- @stalkphish.bsky.social · 07/05/2025

✨ Batch N°2️⃣4️⃣1️⃣ of PhishingKit Yara rules! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 American Express 📌 Cetelem 📌 FedEx 📌 Midland States Bank 📌 Royal Credit Union github.com/t4d/Phishing...

github.com

GitHub - t4d/PhishingKit-Yara-Rules: Repository of Yara rules dedicated to Phishing Kits Zip files

Repository of Yara rules dedicated to Phishing Kits Zip files - t4d/PhishingKit-Yara-Rules

011

-= StalkPhish =- @stalkphish.bsky.social · 28/04/2025

✨ New batch of PhishingKit Yara rules Rules for triage/detection of #phishing kits targetings users/customers of: 📌 E-ZPass IAG 📌 Huntington National Bank 📌 Charles Schwab 📌 Avida Finans AB 📌 SFR github.com/t4d/Phishing...

github.com

GitHub - t4d/PhishingKit-Yara-Rules: Repository of Yara rules dedicated to Phishing Kits Zip files

Repository of Yara rules dedicated to Phishing Kits Zip files - t4d/PhishingKit-Yara-Rules

011

-= StalkPhish =- @stalkphish.bsky.social · 19/03/2025

✨ 5️⃣ new PhishingKit Yara rules! ✨ Rules for triage/detection of #phishing kits targetings users/customers of: 📌 Visa 📌 Telstra 📌 MBH Bank 📌 Alibaba Group 📌 CaixaBank Find more on our #Opensource #Freesoftware repository: github.com/t4d/Phishing...

github.com

GitHub - t4d/PhishingKit-Yara-Rules: Repository of Yara rules dedicated to Phishing Kits Zip files

Repository of Yara rules dedicated to Phishing Kits Zip files - t4d/PhishingKit-Yara-Rules

011

Reposted by -= StalkPhish =-

M82 @m82.eurosky.social · 02/03/2025

On vous attend !

141

-= StalkPhish =- @stalkphish.bsky.social · 15/02/2025

📣 Meet Thomas Damonneville - our founder - at the #M3AAWG organized by the Messaging, Malware, Mobile Anti-Abuse Working Group in Lisbon next week for his presentation entitled: “Hunting for phishing URLs, kits and business”. 👋 In partnership with Signal Spam #phishing #phishingkit #cybersecurity

131

-= StalkPhish =- @stalkphish.bsky.social · 05/02/2025

🚀 Hum, you know what? 📢 We've just reached 8️⃣0️⃣0️⃣ PhishingKit-Yara-Rules made freely available to everyone! ❓ These rules detect phishing kits targeting 3️⃣0️⃣0️⃣ of the world’s best-known brands and trade names. -> Check this: github.com/t4d/Phishing... #phishing #phishingkit #infosec #cyber

021

-= StalkPhish =- @stalkphish.bsky.social · 29/01/2025

✨ New batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of phishing kits targeting users/customers of: 📌 Microsoft OneDrive 📌 Aramex 📌 Assurance Maladie 📌 Doctolib 📌 Generic email creds harvester (CN) 👉 Find these rules in our StalkPhish.io CTI product too!

001

-= StalkPhish =- @stalkphish.bsky.social · 15/01/2025

✨ Second batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of #phishing kits: 📌 AT&T 📌 PayPal 📌 SumUp 📌 SBB CFF FFS (SwissPass) 📌 Indonesiabaik.id This free and #OpenSource project is now: ✅ 7️⃣8️⃣7️⃣ Yara rules available! ✅ 2️⃣3️⃣0️⃣ Commits ✅ 5️⃣ years old -> github.com/t4d/Phishing...

022

Reposted by -= StalkPhish =-

Cedric Pernet @cedricpernet.bsky.social · 13/01/2025

I was a bit bored this weekend... So here's a quick write-up on how I pivoted from one single SMS to more than 900 fraudulent phishing websites impersonating different brand such as @netflix.com and more. www.linkedin.com/posts/cperne... #cybercrime #phishing

1115

-= StalkPhish =- @stalkphish.bsky.social · 03/01/2025

🎣 A Zip package containing 10 phishing kits impersonating the following brands, found yesterday using StalkPhish.io :

021

-= StalkPhish =- @stalkphish.bsky.social · 19/12/2024

24H of #phishing URLs impersonating USPS. Hundreds of domain names generated each day (detected by stalkphish.io):

010