Vercel phishing lure host relays FingerprintJS/sandbox-filter result to Telegram

Ibrahim Saud@tektrix

•updated 16 days ago•0•0•4

Detects two-stage phishing activity involving an initial visit to a Vercel-hosted lure page followed by the exfiltration or relay of fingerprinting and sandbox-evasion results to api.telegram.org.