🚨 In the last 10 days, I’ve received 8 phishing emails with the same theme:
👉 “Your cloud storage is full. Your data will be deleted.”
These campaigns now use anti-analysis scripts:
- Detect Selenium / Puppeteer / Playwright
- Check navigator.webdriver & cdc_ traces
- Detect HeadlessChrome
- Use debugger tricks to break analysis
- Block DevTools & wipe the page
- Force mobile-only targeting
- Continuously re-check environment
🔗 Sample URLs:
storage[.]googleapis[.]com/whilewait/successcomes.html
storage[.]googleapis[.]com/sndrr/strow.html
storage[.]googleapis[.]com/noonchi/noon.html
storage[.]googleapis[.]com/sndrr/hmd.html
storage[.]googleapis[.]com/wetaobao/taobao.html
#CyberSecurity #Phishing #ThreatIntel #GoogleStorage #GoogleStorageAPI #CloudStorageFullScam