Phishing Infrastructure Targeting Egyptian Banks and Fintechs

Coming soon. This write-up is still being written. Check back shortly; it will be published at this same address.

Passive tracking of lookalike domains impersonating Egyptian financial brands, and an open-source monitor to keep watching them.

What it will cover

• Lookalike domains impersonating Egyptian financial brands, tracked from passive sources only
• Clustering by certificates, hosting, registrars and phishing-kit traits
• An open-source monitor with STIX 2.1 output
• Live sites are reported to the brands and hosts before publication

Meanwhile

• The case file in my portfolio: https://artfuldodger10.github.io/portfolio/#/case/egypt-phishing
• The code, detections and IOCs: egypt-phishing-monitor