‘The Manipulaters’ Improve Phishing, Still Fail at Opsec

**The Manipulaters / Saim Raza** operate a long-running phishing and spam ecosystem (notably HeartSender) that sells phishing kits and spam services; new research from DomainTools shows many of their systems and customers were infected by stealer malware and that HeartSender leaks authentication tokens and customer data, increasing risk to victims and customers of the service.