HijaIyh - Phishing Kit Type

#HijaIyh #PhishingKitType #phishing #phishingkit


This phishing kit may contain text such as
HijaIyh 2019
HijaIyh_Activator

      REKENING RESMI TRANSAKSI PRODUCT HIJAIYH

Per @dave_daves there is a Phishing Kit Type called Hijalyh that Threat Actors use generally to phish for Apple credentials.  The threat actor email is location in this file location on those kits

/HijaIyh_App/application/config/result.iyh.json






And per @MaelSecurity may be linked to
Name: Alin Koko Mansuby
mail: indonesianpeople.shutdown57 @ gmail[.]com
GH: http://github.com/justalinko
https://notes.hijaiyh.org/rek.txt

Also per @stevenberg107 may be linked to
https://twitter.com/stevenberg107/status/1132251575957610496
Name: Alin Koko Mansuby Source From Facebook : https://facebook.com/alinko.jp


example 1:
https://twitter.com/ANeilan/status/1133026750840135680
hxxp://appleid-information-update.wullingalmz-cgktkg2910.org

References
https://twitter.com/dave_daves/status/1128271690746736640
https://twitter.com/MaelSecurity/status/1124709155770646528