{"id":3020,"date":"2024-11-07T10:23:39","date_gmt":"2024-11-07T10:23:39","guid":{"rendered":"https:\/\/certera.com\/blog\/?p=3020"},"modified":"2026-02-25T07:23:02","modified_gmt":"2026-02-25T07:23:02","slug":"one-year-140000-phishing-websites-the-impact-of-sniper-dz","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/one-year-140000-phishing-websites-the-impact-of-sniper-dz\/","title":{"rendered":"One Year, 140,000+ Phishing Websites: The Impact of Sniper Dz"},"content":{"rendered":"\n

According to Palo Alto Networks Unit 42<\/a> cybersecurity researchers, the Phishing-as-a-Service (PhaaS) platform Sniper Dz has recently achieved a worrisome milestone for many.<\/p>\n\n\n\n

Over the year, Sniper Dz has created over 140,000 phishing sites, targeting popular platforms like Twitter, Facebook, Instagram, Netflix, and PayPal users.<\/p>\n\n\n\n

How does Sniper Dz launch Phishing Attacks?<\/h2>\n\n\n\n

Through the online admin panel & ready-made downloadable phishing templates:<\/strong><\/p>\n\n\n\n

It offers an online admin panel where hackers can choose from a catalog of convincing phishing pages. They can host these pages on Sniper Dz’s servers or download the templates to host on their servers.<\/p>\n\n\n\n

The worst part is that it\u2019s not easy to detect the infrastructure of Sniper Dz. Why?<\/strong><\/p>\n\n\n\n

Because the content is hidden behind a public proxy server, this server loads the phishing content from their own servers, which helps protect their infrastructure from being detected.<\/p>\n\n\n\n

\"Phishing<\/figure>\n\n\n\n

Source<\/a> (The flowchart shows how a phishing attack works with this proxy server setup. It includes a decoy page, a public server, and a web server that hosts the phishing content. When the victim clicks on the temporary decoy phishing page, it triggers a script that automatically configures the proxy server.)<\/p>\n\n\n\n

How did Sniper Dz become Successful in launching such Attacks?<\/h2>\n\n\n\n

The legitimate reason why Sniper Dz attacks become successful is that hackers use popular brand names. For instance<\/strong>, Blogspot was one of the most popular platforms used by attackers.<\/p>\n\n\n\n

Also, a Sniper Dz telegram channel was founded in August 2024, with over 7,156 subscribers. Here, different tutorial videos are posted on how to execute the attacks successfully.<\/p>\n\n\n\n

Sniper Dz Is a Free PhaaS Platform<\/h2>\n\n\n\n

Yes, you heard that right! Usually, PhaaS platforms and phishing kit creators can cost hundreds of dollars, but Sniper Dz offers phishing attack options for free. It\u2019s likely because they collect the stolen credentials of victims from phishers using their platform to cover their costs.<\/p>\n\n\n\n

How To Stay Protected From Sniper Dz?<\/h2>\n\n\n\n

Below are some methods that can be used to stay protected from PhaaS platforms.<\/p>\n\n\n\n