$ tail -f /var/log/lures
Social engineering, freshly brewed.
BAD CAFE is independent research into the lures that get people to run the payload themselves: ClickFix, poisoned search results, fake job interviews and whatever's brewing next.
0x01 · On the menu
What we're roasting.
ClickFix
Fake CAPTCHAs, browser "update" prompts and fix-it pages that walk people through pasting and running a command themselves.
1 write-up 0x02SEO luring
Poisoned search results, sponsored ads and look-alike download sites that put a lure at the top of the page for a real query.
Brewing 0x03Interview phishing
Fake recruiters, take-home coding tests and meeting-app "fixes" aimed at people looking for work, especially developers.
Brewing0x02 · The brew
How we research.
- 01
Forage
Hunt live lures in search results, ads, inboxes and job boards.
- 02
Grind
Detonate them safely in an isolated lab, never on a real machine.
- 03
Dissect
Map the chain from the first click to the payload, and the persuasion at each step.
- 04
Serve
Publish the write-up, IOCs and detection ideas defenders can use.
0x03 · Fresh from the grinder
Latest research.
Seen a lure in the wild?
Send it over: a screenshot, a defanged URL or the email itself. Credit given if you want it.
Submit a lure