New answers tagged

-2

Well for security talk, others vaguely touch on, there are defiantly things you can try. However, look at the other side of things. What happens if you do download the php due to lack of security? A good hacker exploiter or malicious character does it for a reason. Now yes, you can download a php file without executing it, and it can be searched on ...


1

First off, a site can't really be vulnerable to a phishing attack. A site / email / app can always be duplicated convincingly from an aesthetic standpoint given enough time. So really, it would be the end user who is or isn't vulnerable to phishing since they are your target. Regarding SET, the relevant logic in SET can be found here (lines 130-167). Have ...


0

If you have such fundamental questions regarding such an important topic, I would highly recommend you to first read everything about PCI-DSS and possibly get external help for your company, because implementing this yourself starting from zero will be very demanding.


0

Yes, there are a few guidelines: 1) Filter phishing mails at your company's mail server. This will already help a lot. Of course not so much against mentioned spear phishing where only few mails are sent to specific persons, but it might catch these as well. 2) If there is a phishing campaign, immediately counteract it by sending awareness mails. 3) Answer ...


3

I think this method would return a lot of false-positives. One case in particular where you would have false positives is where the sender's organization has their own domain name (senderdomain.com), but they use a third-party hosted outgoing SMTP server (such as their ISP's outgoing SMTP server, or an email hosting company's outgoing SMTP server) to send ...


1

It happened many times to me, that I had to use locally provided email to send something, but I needed the reply to came to my main/official account. For example I am at company on Friday evening, I see main server lost connection but cannot be switched off/on for obvious reasons. Moreover on Monday morning it must be fully recovered. I am in position to do ...


5

It's a misspelling. Even in both links. phishing (M-W Online) a scam by which an e-mail user is duped into revealing personal or confidential information which the scammer can use illicitly Might not be the best proof, but only 1.2% of all the Google results are for "phising" versus "phishing". I seriously believe this is human err. ...


4

You can't, at least not until mobile OS developers stop prioritizing UX over security. For now the best you can do is to make sure the app you're using is from a legitimate and trusted developer, and the credentials it's asking for are related to the function of the app (a photo app asking for Instagram credentials to post on it seems alright, but the same ...


4

According to VirusTotal, Sophos anti-virus seems to be the only one yet to consider this page as malicious. However, as you correctly analyzed it, this page is a blatant phishing attempt. Your browser would normally not let a page, even a malicious one, get any information of what is going on in the other tabs. The only exception is when a page delivers ...



Top 50 recent answers are included