1

  1. Some phishing links contain random digits / codes (e.g: https://refno1234.example.com). For such links, is there an increased risk by clicking on them because the unique code could be matched to your email / mobile number and therefore verify it exists?

  2. Is it possible, by clicking on a phishing link, to run malicious scripts in the background to steal your personal data/files?

Improve this question
0

1 Answer 1

Reset to default
3

Yes, there can be unique identifiers in links that will pair you with that "campaign" and you will be hit again with a more sophisticated attack, now that you are a known "clicker".

Yes, scripts on the webpage you click can steal your credentials, launch malware, encrypt files, etc. I did a video on how I investigated a sophisticated version of this and what exactly it did.

Improve this answer
2
  • Does browser sandboxing not avoid this though. It wasn't clear from the video if the attempts to alter files were successful
    – EML
    Mar 25, 2021 at 5:45
  • 1
    Browser sandboxing can help, yes.
    – schroeder ♦
    Mar 25, 2021 at 7:17

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .