Hackers Abuse SniperDz PhaaS Ecosystem for Brand Impersonation and Browser Hijacking

Cybersecuritynews •Tushar Subhra Dutta • June 11, 2026

A sophisticated Phishing-as-a-Service (PhaaS) platform called SniperDz has been quietly enabling a wide range of online fraud that goes far beyond basic credential theft. The platform provides cybercriminals with a ready-made toolkit to run convincing scams at scale, targeting victims across the Middle East and North Africa through social media platforms like and Instagram. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SniperDz Phishing-as-a-Service Platform Dismantled by INTERPOL A coordinated investigation led by INTERPOL and the Algerian National Police resulted in the dismantling of SniperDz, a phishing-as-a-service (PhaaS) platform that operated since at least 2015. Group-IB played a crucial role in this operation, which led to the arrest of the primary developer and 201 additional arrests across 13 countries in the MENA region. SniperDz was responsible for over 140,000 phishing pages and targeted more than 30 global organizations, including PayPal and Netflix. The platform provided ready-made phishing kits and exploited social engineering techniques, impersonating public figures to lure victims. The investigation revealed significant operational security failures by the suspect, including the publication of video tutorials that exposed sensitive information. The operation also seized 53 servers and identified nearly 4,000 victims. This takedown marks a significant victory in combating cybercrime in the region. 6 sources 73

Extracted Entities

Hackers Abuse SniperDz PhaaS Ecosystem for Brand Impersonation and Browser Hijacking

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)