A phishing-as-a-service (PhaaS) platform called Caffeine is unlike others in that it offers an open registration process, requiring neither invitations nor referrals, allowing anyone who registers to access all the tools one could need to launch a phishing attack. “Phishing is one of the most popular attack vectors, and its use has only increased,” commented Avast Security Evangelist Luis Corrons. “Sadly, cybercrime has become a mature industry with different players specialized in different tasks, from stealing credentials to laundering money. PhaaS allows untrained cybercriminals to access powerful information-stealing tools.”
