Analysis of “The Collector”, an automated email collection and analysis platform
🇮🇹​ Italian version here I conducted an experiment to see what happens to an email sent to a domain “similar” to a real one, such as gmeil[.]com or yahoo[.]com[.]cm (typosquatted).Not only it was “read,” but it triggered a coordinated response from a sophisticated threat intelligence platform. In this article, I have summarized the stages of…