Fake portals everywhere [1] — Autopsy of a FedEx phishing kit

Thu, 07 May 2026 00:00:00 +0000

This note and the investigation it builds on were carried out by Sinclair M. and Axel K., students in the Intelligence and Cyberthreats major at Oteria. The article is available on sinclair-moulager.com and blog.aksnk.com.

Introduction

Phishing is a technique that consists in tricking a victim by impersonating a legitimate source in order to harvest personal — sometimes sensitive — information.

In 2026, it has become relevant to talk about a phishing ecosystem, a notion echoed for example by Flare, which describes “a mature underground industry” made up of specialised actors who have moved phishing from a “simple technique” to a “service”.

Storm-1516 — Anatomy of the Russian Information Operation

Wed, 06 May 2026 00:00:00 +0000

Context and scope of the report

Against a backdrop of war returning to Europe and the intensification of foreign hybrid operations targeting Western democracies, France set up VIGINUM in 2021. Placed under the authority of the SGDSN¹, the service is tasked with detecting, qualifying, and documenting foreign digital interference threatening the integrity of public debate.

In May 2025, VIGINUM published an analysis of the Russian information operation Storm-1516, active since at least August 2023. The report describes its main characteristics and the risks it poses to French-speaking and European information spaces.

Cti on aksnk / notes

Fake portals everywhere [1] — Autopsy of a FedEx phishing kit

Introduction

Storm-1516 — Anatomy of the Russian Information Operation

Context and scope of the report