Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Sniper Dz free PhaaS ecosystem rebranded to scale phishing operations

Threat Actor Meta
First reported
Last updated
Happening score
H score 43
1 unique sources, 2 articles

Summary

Hide ▲

A long-running Sniper Dz ecosystem operated as a free phishing-as-a-service (PhaaS) platform that repeatedly rebranded, lowering the barrier for large-scale credential theft and scam delivery. Its bundled kits, hosting, and support helped cybercriminals launch phishing campaigns across major brands and government impersonations.

Related Happenings

Russian Coms caller-ID spoofing platform evolved into a sold criminal service

Threat Actor Meta
H score43 First: 13.07.2026 16:23 Last: 13.07.2026 16:23 Sources 1

About this happening: Investigators documented Russian Coms as a monetized caller-ID spoofing platform that let criminals hide their identity and scale scam calls across more than 107 countries...

Open Happening

Pink new extortion brand within The Com

Threat Actor Meta
H score31 First: 08.07.2026 19:47 Last: 08.07.2026 19:47 Sources 1

About this happening: Pink is a The Com-linked extortion brand associated with O-UNC-066 that is now being used in a voice-based phishing campaign against Microsoft 365 users. The a...

Open Happening

Meta For Business Facebook Messenger fake-verification phishing campaign

Campaign
H score29 First: 07.07.2026 10:00 Last: 07.07.2026 10:00 Sources 1

About this happening: A phishing campaign abused Facebook Messenger chatbots and fake verification lures to steal Meta For Business credentials and sensitive identity data, creating account...

Open Happening

Phantom squatting AI-hallucinated domain phishing campaign

Campaign
H score35 First: 01.07.2026 10:20 Last: 01.07.2026 10:20 Sources 1

About this happening: A phantom squatting campaign is turning AI-hallucinated domains into live phishing and malware lures, putting AI-referred traffic at immediate risk. Attackers are regi...

Open Happening

Paid brand-impersonation phishing kits Lucid and Lighthouse scale fake-domain operations

Threat Actor Meta
H score37 First: 01.07.2026 10:20 Last: 01.07.2026 10:20 Sources 1

About this happening: Brand-impersonation phishing has become a paid service, with kits like Lucid and Lighthouse scaling fake-domain operations across 316 brands in 74 countries, i...

Open Happening

Timeline

  1. 15.06.2026 09:30 1 articles · 1mo ago

    Sniper Dz fraud campaign targets MENA users with fake Facebook offers

    Technical Analysis Update

    Fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations targeted users across the Middle East and North Africa with fake offers for free mobile internet packages, financial compensation, and government subsidy programs, then routed victims through Linkbio and Linktree decoy pages into Sniper Dz phishing and traffic monetization infrastructure that abuses browser notification permissions, back-button hijacking, tab-under redirections, premium SMS subscriptions, premium-rate calls, and investment scams.

    Show sources
    Open in new tab
  2. 12.06.2026 11:52 2 articles · 1mo ago

    Operation Ramz disrupts Sniper Dz phishing platform

    Initial Disclosure

    INTERPOL-led Operation Ramz disrupted Sniper Dz, a phishing-as-a-service platform active since at least 2015 and also known as Joker Dz, Storm Dz, and Spam Dz. Authorities arrested Guedz, the platform's primary developer and administrator, took down the website used to provide PhaaS capabilities, and seized hardware containing phishing software and scripts.

    Show sources
    Open in new tab