The project is a simulation of a phishing attack on Telegram users. The project demonstrates how attackers can disguise their actions as legitimate services (for example, a free VPN) to gain access to user credentials.
Features
Disguise as a free VPN:
The user interacts with a Telegram bot that offers to "get a free VPN".
The bot directs the user to a specially created phishing page.
Phishing page:
The page looks like a legitimate service for getting a VPN.
The user shares their contact, enters a confirmation code and an optional 2fa password
Data collection:
The entered data is sent to the FastAPI server.
The server saves the data in a PostgreSQL database.
download:
Features
Disguise as a free VPN:
The user interacts with a Telegram bot that offers to "get a free VPN".
The bot directs the user to a specially created phishing page.
Phishing page:
The page looks like a legitimate service for getting a VPN.
The user shares their contact, enters a confirmation code and an optional 2fa password
Data collection:
The entered data is sent to the FastAPI server.
The server saves the data in a PostgreSQL database.
download: