[AltairX]

Just curious as I have never really bothered with the social engineering side of hacking too much ( I do them sometimes for certain scenarios on lab). There seems to be so many hacked instagram accounts with those fake "Hey bro help me vote for a photo comp" shit that leads u to a fake login page, but how do the scammers ( I would'nt call them hackers) get their hands on the sites as I find it unlikely they made it themselves since they seem quite stupid because of their shit english blows their cover immediately? Is there a place they can get a premade mobile phishing site that easily?

[joepa]

Credential stuffing?

[BeenLurkin]

I know someone who got supposedly hacked even with 2FA and everything but it sounded suspicious to me, like done from the inside maybe

[136102857]

perhaps SIM SWAP

[fuzzzy]

phishing for creds probably.