Andrei is a 4th year student at the Faculty of Automatic Control and Computer Science from Politehnica University of Bucharest, at the start of his career, with work experience in Threat Intelligence. He has a strong interest and practical experience in Cyber Security, NLP and Computer Vision, through university and personal projects, and various hackathons in which he has participated.

Hunting / Scraping with Favicons (Lightning Talk)

Phishing is as old as it comes in terms of techniques for harvesting credentials and personal information. In the past years at DefCamp, our collegues have presented various methods for detecting phishing websites. 

But how can you actually find them? We know threat actors generally reuse phishing kits / templates. One thing that doesn’t really change is the favicon. In this talk, we’ll quickly go over an approach of using  Favicon hashing – murmurhash – and use Shodan for finding targets. We’ll present some interesting results and some challenges we’ve identified.

This presentation is co-presented with Mihai Vasilescu, Security Research Engineer at Keysight Technologies Romania.