New answers tagged

0

The most common vector for hacking user computers are probably Trojan horse programs, followed by malicious code on web pages. Although social engineering and using vulnerabilities to hack in through user routers are methods of attack, these require more work on the part of an attacker and are probably a lesser threat unless you are someone that the attacker ...


2

Attackers employ a variety of techniques to compromise networks, however I would argue that in many (if not most cases) social engineering is involved. Spear Phishing has an overwhelming success ratio when executed properly and skilled social engineers are always going to be something to be feared. Spear Phishing typically also relies in a weakness in the ...


3

This is an extremely broad question. When you're learning about security and penetration-testing, you're supposed to learn all these techniques. There are loads of techniques each with it's own purpose, situation,... To give a small answer on your question, Social engineering is often used, and so are backdoors. Lastly I had to write a PoC (Proof of concept)...


0

If you want to be an email crusader save the email, forward it to the agency address and main address, and let them go after the phisher. With the email there is enough information to figure out where it was sent from and they can shut down that service, if they have any control over it. If not they can complain to the country of origin and see if they ...


4

While the From: header in an e-mail can be spoofed, depending on your own mail client's security settings, spoofed headers will usually land in your junk e-mail folder or not be received at all. Depending on your own mail server, you are also able to check what server the e-mail came from. SPF Validation works by checking this against the domain records, ...


22

You should respond to phishing from .gov addresses the same way you respond to any other sort of phishing - you don't. Don't reply to the e-mail, don't click links, don't open attachments, don't do anything the e-mail asks you to do. If you really want to be generous, check the WHOIS records for the domain the message claims to come from. That may have ...


11

I'd like to let the agencies involved know that they have compromised accounts This is not likely to be true. Unencrypted, unsigned email is not a secure system; it's based on data that the mail client provides. That data is assumed to be accurate. This design allows an attacker to forge the header data (in this case the From header), and the recipient's ...


46

It is likely that the from header has been forged. I get emails from fake .govs quite often, mostly they end up in my spam filter. The hyperlink within is either unique, allowing tracking, or just delivers malware. Most of the time I just ignore these. If you believe that the header is not forged then you can typically contact the agency by Googling their ...


2

While Google Safebrowsing is today mostly an offline check against some local database they still require that the browser queries google directly before presenting the phishing warning to the user. This is done to reduce the chance of false positives because the online check has the most up-to-date information. But it still might be considered a privacy ...


3

Based on what you provided we can see that the Thunderbird icon is active. If it was configured to synchronise with Gmail account, and the authorisation was never performed or revoked, the connection is refused by Gmail service and Thunderbird requests an OAuth authorisation. If the above is true, there's no indication this authorisation request is ...


0

You cannot via HTTP because A)PHP code written in the file, is deleted from the file by the http server before it is sent to the http client So an HTML form might reference blah.php which contains a php snippet, code surrounded with php tags, that checks if submitted password=1234 but if you were to wget blah.php you won't see that code. (even if ...


1

You can try the following options: Have someone trusted in the organization warn them that there will be a test that will target the organization. This way if they see your message they know that it is a test and all is okay and it is not a sophisticated phishing scam. Add your contact information regarding any questions and that way when they call you ...


1

This could be sent from a hacked phone server, hacked phone account for sending sms, or from a service that has unlimited sms. Is this the literal message? Is this all that was in the message? If I google for this (with quotes) I don't get a result back. Do you see a number or name? Google it and post it here.



Top 50 recent answers are included