Questions tagged [phishing]
Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.
559
questions
2
votes
1
answer
201
views
How can I as middleman verify whether a phishing site is valid if the scam listens only on the referrer link and blocks any other access methods?
How can I as a trusted user of a middleman company (such as PhishTank) verify whether a phishing site is valid if the scam listens only on a unique referrer link(randomly created) and is blocking any ...
- 421
0
votes
2
answers
164
views
Incident response to a medium scale phishing attack whereas the targets are not from our company?
Our company suffered a phishing attack yesterday. While investigating about the attacker and the potential employees of ours who might have been phished, we ended up with the attacker database of ...
- 2,924
0
votes
0
answers
44
views
How can I download and read a file that might be spear fishing? [duplicate]
My colleague has forwarded me an email and asked "Can you please check for me if it is genuine?"
I'm just a programmer, so I have no idea.
The email is from a website called PDFfiller, which seems ...
- 101
1
vote
1
answer
245
views
Why would a stranger offer to write content for a nonexistent blog?
I get emails like this all the time:
Hello dear,
I’m a long time reader. I’m writing to you because I’d love to contribute a guest post on your website.
I’ve been brainstorming some topics that I ...
- 207
0
votes
1
answer
315
views
Email phishing, understand mail header
I try to understand phishing email received from an attacker:
Received: ....
Received: ....
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=; helo= envelope-from:attacker@...
- 103
2
votes
3
answers
576
views
How to tell if an email source is spoofed?
I've received an email to my gmail account from FCMB, a bank in Nigeria (flashing warning lights already). It's not addressed to me (i.e., the email starts off "Dear Daniel," [not my name]). But the ...
- 123
3
votes
1
answer
269
views
Would it be possible for me to become infected just by opening a Facebook message?
I received one of those obvious fake "is this you?" and some fake Youtube link on Facebook Messenger. I don't know what it redirected to as I didn't click it (I only hovered over it to see if it was a ...
- 31
0
votes
3
answers
323
views
Can phishing site URL shorten into numbers?
A suspected hacker was trying to get the user to input those numbers (2412958) in their address book. And user knows that the numbers are weird.
Can URLs be shortened in texts like that?
21
votes
4
answers
6k
views
Redacting URLs as an email-phishing preventative?
In a large organization (e.g., a city staff), relying on human behavior to prevent phishing attacks isn't nearly effective enough. While it would be somewhat inconvenient (security usually is), I'm ...
- 327
2
votes
3
answers
323
views
Why is it not possible for browsers to completely detect the Phishing pages?
The browsers have some capability to detect the phishing pages, but they are not able to detect all. Why is that?
Phishing still remains to be one of the most convenient way to hacking. Why is it not ...
- 21
0
votes
2
answers
1k
views
How does someone know i clicked a link in an email? URL spoofing? JSON?
How do hackers/scammers know that I clicked a link? Why is my personal info in the url redirect link? Is this info then being stored in a database and the hacker/scammer knows that because this ...
1
vote
1
answer
513
views
Mindlessly clicked days old phishing email link appeared dead
Was multitasking and mindlessly clicked Squarespace phishing email. Page didn't load, and right away I realized my mistake. Completed several malware scans which came back clean. The button link ...
- 11
0
votes
1
answer
135
views
Phishing emails and securing set up from compromise?
I'm a one-man company and I'm getting a lot of phishing emails very similar to the emails from companies I use.
Some of these companies and the emails we exchange are very unique. How would these ...
- 121
2
votes
1
answer
322
views
Suspicious GitHub mirror site (https://hzb.world/)
Through some odd Google rabbit hole, I ended up at what appeared to be the GitHub website. I reflexively tried logging in to view my repositories. Upon attempting to log in, it said my browser did ...
- 121
1
vote
0
answers
82
views
SMS spoofing detection [duplicate]
Our company uses SMS delivery providers like Nexmo etc. We have noticed some of our recipients have received phishing sms messages from fraudsters where the number/sender name was spoofed to match our ...
- 133
2
votes
1
answer
378
views
Mystery link containing fragment identifier in malicious email
The following link was received in a suspected phishing attack email. Unfortunately, the recipient clicked on the link in their outlook client:
<tr>
<td class="m_-[string-of-19-numbers]...
- 123
11
votes
3
answers
59k
views
Unknown automatically generated email in sent folder
I just noticed a strange email in my sent folder that I did not send. Here is the header information:
To: [email protected]
From: ********@gmail.com
Date: Mon, 10 Jun 2019 06:54:17 ...
- 213
1
vote
1
answer
1k
views
Spam/Phishing detection when there is no MX record
While SPF/DKIM/DMARC are standard, foundational tools to help protect an email-sending domain from spoofing, what about domains that do not send emails?
How do spam or phishing filters treat emails ...
- 129k
16
votes
4
answers
11k
views
Is it a good security practice to force employees hide their employer to avoid being targeted?
A young tech company which operates on sensitive data has employees that fall victim to phishing/porting scams despite its best efforts to instill security fobs, vpn, password managers, non-sms 2FA, ...
- 288
0
votes
3
answers
867
views
Why would a scammer not reply with the same email?
I was recently messaged over a website of an online marketplace regarding an advertisement of an item I was selling, whereupon the "buyer" asked me to contact them over an email they provided.
After ...
- 3
0
votes
1
answer
298
views
Whitelist Simulated phishing landing page
We are running a simulated phishing campaign and one of the landing pages has been blacklisted by google. If you try to visit it in chrome you get the big, red warning page "Deceptive site ahead" (...
- 99
1
vote
1
answer
212
views
Phising test failed e-mail to my personal account, how does this scam work?
I've recently gotten a pair of "User Selkie has failed the phishing test" emails to my personal account. The email has no other information, no links or anything, and while I'm not going to respond to ...
- 715
2
votes
0
answers
108
views
Does not using CAS when it's availible encourage phishing?
My (U.S., R1) academic institution uses CAS (Central Authentication Service) to authenticate almost all our web services.
However, they don't use CAS for our GitHub Enterprise instance. Instead they ...
- 121
8
votes
2
answers
2k
views
How did a phishing email pass SPF, DKIM and DMARC?
A friend received a spoofed email (from Bank of America using an uber.com address) which was correctly identified as 'spam' by Gmail. However, looking at the raw message it seems to have passed SPF, ...
- 601
3
votes
1
answer
64k
views
Bogus Instagram account using my email, never been verified, has over 1000 followers
This appears to be a phishing scam like I've never encountered before.
I received an email from [email protected] to an email address I rarely use, but I noticed it because messages get ...
- 33
6
votes
3
answers
1k
views
What if the Google account login screen is spoofed [duplicate]
I am talking about the apps that allow using my google account for login. Nothing against Postman, just using its login screen for example -
My concern is that an app could be spoofing this whole ...
- 171
87
votes
12
answers
16k
views
When is phishing education going too far? [closed]
I currently work on the IT security team at my workplace in a senior role. Recently, I assisted management in designing the phishing / social engineering training campaigns, by which IT security will ...
- 1,766
45
votes
8
answers
38k
views
Is it ever safe to open a suspicious HTML file (e.g. email attachment)?
If I receive an email that has an attachment called something like safe-link.html would it ever be safe to open this file?
Clearly, HTML files may have malicious scripts embedded that could run when ...
- 551
2
votes
1
answer
627
views
OAuth: how to prevent phishing with malicious redirect URIs
To quote the OAuth spec:
If the resource owner denies the access request or if the request fails for reasons other than a missing or invalid redirection URI, the authorization server informs the ...
- 123
26
votes
5
answers
10k
views
How could a scammer know the apps on my phone / iTunes account?
I received an email with the subject "Your invoice from Apple #xxxxx".
It then continues by: "[...] your payment from "Pokemon Go was accepted [...]". That line made me sceptical. I just downloaded ...
- 363
0
votes
2
answers
192
views
Opened a phising email on school email
Hello I opened this email sent to my school email and I realized it was a phising email.
And now my OCD and anxiety are going haywire. Is it possible I got infected? I did not click on any links. I ...
- 11
3
votes
1
answer
383
views
Why are my emails going to spam?
I have been trying to learn about phishing emails. I have read up quite a bit on it. I setup a domain somthing.tk (free domain), hosted a website on a VPS (Digital Ocean). Set up my own mail transfer ...
- 3,794
0
votes
1
answer
230
views
What's the payload of this phishing campaign (which I clicked)?
I've been really dumb and clicked a phishing link.
The link arrived via WhatsApp and consists of:
A Nubank está fazendo aniversário e quem ganha o presente é você!. São 2.000 convites para um novo ...
124
votes
5
answers
19k
views
Why do phishing e-mails use faked e-mail addresses instead of the real one?
I read that you can write anything into the From: field of an e-mail.
If that is true, then why are phishing e-mails trying to trick me with look-a-like addresses like [email protected] instead of ...
- 1,687
0
votes
1
answer
235
views
What is the endgame of a site like this?
I came across the following ad:
It's in Dutch, and the title seems to be a mix of autogenerated words to probably create as much of a clickbait title as possible.
The ad goes to the following page: ...
- 117
3
votes
2
answers
660
views
Possible Phishing Attempt?
I use an iPhone. Today I got a text from an unknown number starting from +65. The message was "your one-time Wifi password is xxxx and it’s valid for only 10 minutes". Thought it was a scam and ...
2
votes
0
answers
165
views
Gmail (Dot) Phishing Attack From Avalanche Botnet
I'm a full-stack web developer working in a small startup and have been wearing many hats as a result. I am by no means a cyber or information security expert. I'm looking for a general evaluation of ...
0
votes
1
answer
593
views
Triaging malicious URLs
I'm quite new to the security field and learning my ways on how to triage certain events.
One such alert that I see is "Phishing" when a user clicks on a malicious link. As far as triaging to see if ...
- 133
2
votes
1
answer
330
views
Why would a scammer ask for creation of a new email account?
I recently received the following email:
Good day my dear friend,
I am contacting you to help get the deposit (£8.5 million pounds), my late
client Engineer Alexander left in his Bank before ...
- 73
3
votes
1
answer
477
views
Block Outbound Connections by Country
We want to reduce the number of phishing sites that our users can get to. Would it be useful or more problematic to block outbound connections by geo IP? We already block many inbound connections by ...
- 31
1
vote
1
answer
299
views
My website got blacklisted as "phishing". Any hints on how to avoid that?
I have a personal website hosted using my provider's DNS name (i.e. myname.provider.com) on my personal hardware at home. The web server (both HTTP and HTTPS) is Apache on Debian Wheezy (which is ...
- 10.1k
0
votes
3
answers
202
views
Shared terminal security hole
I want to ask you about what I think is a pretty obvious security hole and what can be done about it.
Suppose my library has a room containing network-connected workstations serving Linux. You log on ...
- 101
0
votes
1
answer
212
views
An authentication protocol to prevent phishing & solve the problem of password reuse?
When writing about best practices for authentication, I find that today's best practices still leave gaping holes in security, specifically not solving the problem of password reuse by users - ...
- 138
1
vote
0
answers
130
views
What would you do as first day of CSO or Head of CyberSecurity [closed]
I was asked this question at an interview today and was unable to give a structured answer since there is so many things a head of security can do.
The additional info that I had were :
- You can ...
1
vote
1
answer
274
views
Strange phishing email
I received a strange phishing email the other day that seemed to use span tags to encode "hidden" values within the email's body:
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"&...
- 23
3
votes
3
answers
10k
views
Accidentally clicked a phishing link, am I at risk?
I clicked a link from a fake Twitch streamer and now I'm scared of being spied on. I typed my account details but didn't actually sent them because I realized it was a fake link right before clicking ...
- 31
2
votes
0
answers
94
views
What does this phishing email achieve? [duplicate]
The email is formatted as an email from Google notifying me that I need to respond to an intrusion attempt on my account. There are no other links other than these href mailto links ("Oui Moi!" and "...
- 215
2
votes
1
answer
656
views
How is this website redirect working?
Someone sent me a URL via WhatsApp (httpx://cadburys-prizes[.]com) that allegedly lets me claim a free box of chocolates. Obviously this is fake and I've seen similar websites before.
If I view the ...
- 194
1
vote
0
answers
154
views
Possible phishing victim. How to proceed? [closed]
I was trying to buy tickets for a show on an official web page. This will be the last show of this band so the server went down pretty quickly. The band tweeted about difficulties and then someone ...
- 1,221
-1
votes
1
answer
173
views
Can we infect our system by opening a email with outlook 2016?
I read that it is possible to get a virus just by opening a mail (not even clicking at any links on it or opening the attachments), because scripts can be attached to it.
Is this also true for ...
- 136