BigPhish Pilot
Real-time and Historical Phishing Intelligence
In today’s digital landscape, phishing has emerged as one of the most pervasive and damaging forms of cybercrime. Cybercriminals constantly evolve their tactics, targeting individuals and organizations with sophisticated phishing schemes designed to steal sensitive information and cause significant financial harm. The need for robust and reliable tools to combat these threats is imperative. That’s where BigPhish, a CFLW Intelligence Service, steps in. It is an advanced open-source intelligence (OSINT) service crafted to detect, disrupt, and investigate phishing activities at their earliest stages.
BigPhish is developed to support three use cases:
- Prevention – Provide operational tools to disrupt phishing at an early stage by supporting effective and efficient take down measures.
- Real-time Intelligence – Provide Law Enforcement data driven operational insights on actual phishing activity to start investigations.
- Forensics by Wayback Machine – Disclose historical data of active phishing campaigns to support analysis of relations between phishing campaigns and see the bigger picture.
If you are interested in the latest developments of BigPhish Pilot and would like to be kept informed as soon as the solution is launched as an operational intelligence service, please let us know: info@cflw.com.
BigPhish is designed to address the pressing need for early detection of phishing websites, providing an essential line of defense against cyber threats. Leveraging cutting-edge technology, BigPhish offers real-time monitoring and comprehensive analysis to identify potential phishing sites before they can inflict damage. Our solution not only helps in preventing phishing attacks but also plays a crucial role in disrupting ongoing phishing campaigns, thereby minimizing their impact.
Beyond prevention and disruption, BigPhish is an invaluable tool for the thorough investigation of phishing incidents through its use as wayback machine. By providing detailed insights and forensic analysis, BigPhish enables security teams to understand the methods and patterns used by attackers, facilitating a proactive approach to cybersecurity. With our innovative solution, businesses can build a robust defense strategy, enhancing their resilience against future threats.
History of
BigPhish
From Proof of Concept to Operational technology for Law Enforcement and Cyber Security Professionals
BigPhish is the result of TNO research within the program of the Dutch Police: Police work in the Digital Domain pillar Phishing. BigPhish has been actively used by the police in its own environment. Analyses and results of the tool have contributed to police investigations and the subsequent arrests of various phishing kit providers over the past year. Current information is also used to enrich cyberintel image reports from the police. The actionable perspective is further broadened by offering phishing knowledge and expertise via an expert from TNO in the development of a police reporting process for phishing victims.
The end result of the research and innovation phase are:
- Operational case conducted with the Dutch Police that led to an arrest and conviction.
- Research paper: Catching Phishers By Their Bait: Investigating the Dutch Phishing Landscape through Phishing Kit Detection
- BigPhish available as open source in COSSAS: https://cossas-project.org/portfolio/bigphish/