pypi phish

[Daniel_Kavan]

Has anyone seen this below?   What are some ways to prevent this with Check Point?  One way we were thinking would be to create a couple of domain objects;  one for pypj.com and another for pypj.org and block them.  Neither of them resolve to IPs, but maybe they activate those when they want to.    Others may  have anti-phishing in Anti-spam & Email Security.

this PyPI has not been hacked, but users are being targeted by a phishing attack
that attempts to trick them into logging in to a fake PyPI site.

Over the past few days, users who have published projects on PyPI with

their email in package metadata may have received an email titled:

```
[PyPI] Email verification
```

from the email address noreply@pypj.org.

Note the lowercase j in the domain name, which is not the official PyPI
domain, pypi.org.

[the_rock · Accepted solution]

Maybe set custom domain *pypi* and block that?

Andy

[Danny · Accepted solution]

Create a custom site for pypj to block it. Best practice.