Customers of 54 EU Banks Targeted By New V3B Phishing Kit

A sophisticated phishing kit known as ‘V3B’ is making the rounds on Telegram, posing a significant threat to the customers of 54 European banks in Ireland, the Netherlands, Finland, Austria, Germany, France, Belgium, Greece, Luxembourg, and Italy. Offered on a subscription basis, this phishing tool comes with features designed to steal sensitive financial information.

The Emergence of V3B

The V3B phishing kit has quickly become a popular tool among cybercriminals, with its Telegram channel already accumulating more than 1,250 members, according to a report by Rescurity researchers.

With a subscription cost ranging from $130 to $450 monthly, V3B offers a wide range of capabilities, including advanced obfuscation, live chat for real-time interactions, localization options, and more. 

Features of V3B

Multilingual and Multi-platform Compatibility

V3B works on both mobile and desktop platforms, with pages professionally translated into several European languages such as Finnish, French, Italian, Polish, and German. This capability facilitates extensive phishing campaigns that can target users in multiple countries, increasing the threat’s effectiveness.

Sophisticated Evasion and Interaction Tools

V3B uses heavily obfuscated JavaScript and a custom CMS to evade detection. An admin panel enables real-time interactions with victims to phish for one-time passwords (OTPs), transaction authentication numbers (TANs), or other sensitive information. Features like QR code login jacking exploit the trust users have in QR codes, making phishing attempts more believable.

Support for Advanced Authentication Technologies

To counter the advanced authentication methods used by banks, particularly in Germany and Switzerland, V3B includes support for PhotoTAN and Smart ID. These features help fraudsters bypass some of the most robust banking security measures, posing a significant challenge to fraud prevention teams.

Final Word

As phishing kits like V3B enable even low-skilled attackers to launch sophisticated attacks, the landscape of cyber threats continues to evolve. To stay protected, individuals should prioritize cybersecurity awareness, use multi-factor authentication, and stay informed about the latest threat vectors and defense strategies.

Related Reads:

• LabHost’s PhaaS Platform Facilitates Phishing Attacks on Canadian Banks
• Your Essential QR Code Safety Guide