Smishing Hackers Can Watch Every Keystroke as Victims Enter Card Details and OTPs
Group-IB details the JWR smishing kit, used by the Outsider cluster, that streams keystrokes and OTPs to fraudsters in real time via WebSocket.
58
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 1, 2026
- Last mentionedSep 16, 2026
Timeline
2 articles · newest firstThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
Weekly ThreatsDay bulletin details a ShinyHunters-style social engineering hit on ReliaQuest, the 296,000-device Dysphoria IoT botnet, and several new malware families.
55
Appears with
- Dysphoriamalware · 1
- Zscalervendor · 1
- Aeternummalware · 1
- C2Loopermalware · 1
- AndroidKitKatthreat actor · 1
- ReliaQuestvendor · 1
- ReliaQuestvictim · 1
- Palo Alto Networks Unit 42vendor · 1
- Outsiderthreat actor · 1
- Cisco Talosvendor · 1
- Group-IBvendor · 1
- Polygonproduct · 1
- ShinyHuntersthreat actor · 1
- Shadowserver Foundationvendor · 1
- iVerifyvendor · 1
- ReliaQuestorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.