Bellingcat @bellingcat Award-winning open source investigation. Want to donate? See here: Aug. 10, 2019 1 min read

Major update on the ProtonMail phishing attacks, establishing over 30 individuals working on topics related to Russia have been targeted. 

The target list includes journalists and investigators working for @guardian, @BBCNews, @_EuropeanValues, @4freerussia_org, and others.

There's a lot of interesting things to be found in the Javascript used as part of the attack, including a phrase used by Guccifer 2.0.

Bellingcat managed to grab a copy of the fake ProtonMail site used in the phishing attacks, and is making the core Javascript files used by the phishing site available for analysis. You can download the files here 

You can follow @bellingcat.


Tip: mention @threader_app on a Twitter thread with the keyword “compile” to get a link to it.

Enjoy Threader? Sign up.

Threader is an independent project created by only two developers. The site gets 500,000+ visits a month and our iOS Twitter client was featured as an App of the Day by Apple. Running this space is expensive and time consuming. If you find Threader useful, please consider supporting us to make it a sustainable project.