This educational project simulates an Instagram password recovery phishing attack. The idea is to make users believe that their account is in danger, prompting them to quickly enter their login details on a fake form. This technique plays on urgency and fear.
The form mimics a legitimate password recovery page, but instead of helping recover an account, it is designed to collect user credentials.
- index.php: Contains the HTML and PHP code responsible for the form and backend operations.
- registro.css: The CSS file for styling the form to appear credible and professional.
- Pictures: Images used in the project to make the phishing page look more realistic.
The project involves setting up a local MySQL database (e.g., using XAMPP or Apache) and connecting it to the HTML form via PHP. When a user enters their Instagram credentials, these are stored in the database.
In a real-world phishing attack, scammers would need to deploy the form on a live web domain. However, this project is meant to be run locally (localhost) to demonstrate the process in a controlled environment.
While this project is purely for educational purposes, it highlights the importance of staying vigilant about where you enter your personal data. Scammers often create websites that look identical to legitimate ones to steal sensitive information like usernames and passwords.
Always verify the URL and make sure you're on the legitimate website. Even a small mistake can lead to significant consequences, such as loss of account access or personal data exposure.