Some security exploits never die, and others seemingly cannot be killed. The Darcula phishing-as-a-service exploit has resurfaced, targeting iPhone users in over 100 countries using more than 20,000 registered brand domains. This threat, first identified in July 2023, has returned to haunt users once again.
Netcraft has issued a warning about Darcula, describing it as a sophisticated Phishing-as-a-Service platform utilized on a vast number of phishing domains. These domains impersonate various trusted brands across different sectors, including postal services, banks, government bodies, and airlines. The criminals behind Darcula have been actively creating new phishing pages, with an average of 120 new domains hosting these malicious activities daily.
