Phishing as a Service Campaign using IDN Homograph Attack

Abstract

The aim of this paper is to demonstrate the method for implementation of a Phishing as a Service (PhaaS) architecture and an internationalized domain name (IDN) homograph attack (using a similar top-level domain) in a real phishing campaign. The official campaign targeted students from "Transilvania" University of Brasov in an official phishing campaign approved by the information technology department, as part of a cybersecurity informative campaign. The paper describes the implemented platform, tools and methodologies used for checking the level of awareness for this type of attack, evaluated by the number of users that will submit their confidential data that could compromise one or more systems.