Hacker ruins his own multi million dollar phishing operation with a rookie mistake

You wont believe how incredibly stupid this hacker was. This guy running a live Microsoft 365 phishing operation totally dropped the ball and left a public Python server wide open with directory listing turned on. Literally anyone could just stroll in and look at his stuff because he left his history readable.

A French security firm named Lexfo found this massive blunder and basically scooped up his entire toolkit. From that single screw up they tracked down two other operators making it three malicious campaigns in total. They were all using custom versions of Evilginx to bypass multi factor authentication and hack into corporate mailboxes.

Since the guy left his directory open it was basically a full confession. Lexfo found all his phishing configs, stolen credential logs, and even his personal Telegram session files. They traced everything back to an Egyptian hacker who goes by codemado who has been doing this since 2018. He was actively stealing corporate accounts in France and North America and keeping them alive by constantly refreshing the stolen tokens.

The funniest part is he didnt even build his own malware. His history showed him downloading and comparing kits from other cybercriminals on GitHub. One version he stole came from a Nigerian operator who goes by mail argenta and that kit was super polished, with special features to trick browsers and hide from security scans. It just goes to show that even high tech hackers can ruin their own whole operation by making the most basic rookie mistake.