I Saw a Phishing Site That Traps Security Bots

This story was originally published on HackerNoon at: https://hackernoon.com/i-saw-a-phishing-site-that-traps-security-bots. How modern phishing kits use honeypots, cloaking, and adversary-in-the-middle attacks—and how defenders can turn those same tactics against them. Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity. You can also check exclusive content about #phishing, #cyber-threat-intelligence, #proactive-threat-hunting, #blue-team, #infosec, #threat-detection, #cyber-attacks, #hackernoon-top-story, and more. This story was written by: @behindthesurface. Learn more about this writer by checking @behindthesurface's about page, and for more stories, please visit hackernoon.com. A phishing kit had a hidden form field with no visible counterpart. It wasn't part of the UI. The victim would never see it. So why was it there? Because it wasn't designed to catch victims. It was designed to catch us.