m.shabbirbarkat Phishing actor indicators and linkers

This is a short article about several e-mail addresses and an IP address which link together what I believe to be someone running phishing pages. The spam emails to obtain victims seem to be sent to e-mail addresses stolen or leaked from a mail order holiday money company in the UK.

buyserver785@gmail.com
aimeetitt@gmail.com
mrsmelissaholly@gmail.com
litogeneration1902@gmail.com
hacklogs0@gmail.com
h4x0rKSA@protonmail.com
teamdevil@protonmail.com
m.shabbirbarkat@gmail.com

One of the addresses associated above “m.shabbirbarkat@gmail.com” leads to someone in real life. They seem to have posted quite a bit of information on a revision / coursework sharing forum.

Daniyal Dani Shabbir
Birthday:Apr 13, 1996 (Age: 22)
m.shabbirbarkat 2

From Pakistan and now in Jeddah, Saudi Arabia (KSA) – note that one of the associated email addresses is “h4x0rKSA”.m.shabbirbarkat 3m.shabbirbarkat 1

Advertisement
This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s