1
  1. Some phishing links contain random digits / codes (e.g: https://refno1234.example.com). For such links, is there an increased risk by clicking on them because the unique code could be matched to your email / mobile number and therefore verify it exists?

  2. Is it possible, by clicking on a phishing link, to run malicious scripts in the background to steal your personal data/files?

0
3

Yes, there can be unique identifiers in links that will pair you with that "campaign" and you will be hit again with a more sophisticated attack, now that you are a known "clicker".

Yes, scripts on the webpage you click can steal your credentials, launch malware, encrypt files, etc. I did a video on how I investigated a sophisticated version of this and what exactly it did.

2
  • Does browser sandboxing not avoid this though. It wasn't clear from the video if the attempts to alter files were successful – EML Mar 25 at 5:45
  • 1
    Browser sandboxing can help, yes. – schroeder Mar 25 at 7:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.