Tracking Adversary Infrastructure with ValidIn and URLScan.ioIn this post, I want to share some threat hunting techniques I’ve honed over time while investigating adversary infrastructure using crowdsourced and freemium tools. While enterprise tools are powerful, you don't always need a massive budget to find ...Nov 27, 2025 · 5 min readhuskyscripts.blog
Job Phishing Campaign Targeting Meta, WhatsApp & InstagramSummary The recent surge in job phishing campaigns targeting major platforms like Meta, WhatsApp, and Instagram has raised significant concerns recently. By analysing newly registered domains with keywords such as hire, apply and wajob a pattern of f...Apr 28, 2025 · 6 min readhuskyscripts.blog
How to Hunt Phishing Campaigns in the Wild Without Analyzing Any Phishing KitIntroduction There are various ways to detect phishing campaigns. By monitoring the certificate transparency logs and based on typosquatting domain names[based on a brand-specific keyword] in the domains from the logs, sometimes we can co-relate phis...Sep 10, 2024 · 4 min readhuskyscripts.blog
Hunting Phishing URLs Made Easy: A Comprehensive Series [0x2]Introduction In the previous part of this blog series, we learned about the structure of phishing websites, which can aid us in identifying similar phishing websites. In this part, we will focus on identifying similar phishing websites from a single ...Jan 30, 2024 · 3 min readhuskyscripts.blog
Hunting Phishing URLs Made Easy: A Comprehensive Series [0x1]Introduction In this blog series, I share various ways to hunt phishing URLs [which may sometimes be malicious URLs, too]. Before tracking such URLs, it is always better to understand how phishing works in the real world, which includes creating phis...Jan 6, 2024 · 4 min readhuskyscripts.blog
