All Questions
10 questions
0
votes
1
answer
341
views
Is it possible to setup a phishing “honeypot” for proof-of-concept purposes without getting the host/IP blacklisted?
In the company I work for, we have many clients and the vast majority of them have hosting with us and we make their web apps. One client, though, just applied for cyber security. Our CEH (certified ...
2
votes
1
answer
199
views
Chrome popup - what if button labels for "Accept/Cancel" are exchanged?
Almost all websites show inline modal popups in chrome. How can I be sure that "Cancel" is really cancel and "OK/accept/allow" are properly labeled by the website?
8
votes
2
answers
3k
views
Way to practically identify punycode in Chrome?
I recently read some articles about phishing with punycode. To prevent it when using firefox, you simply type about:config and turn the parameter network.IDN_show_punycode = true. Now you can easily ...
20
votes
1
answer
3k
views
How to verify Google sign-in screen is legit? (Linux Desktop) [duplicate]
I've installed an Electron app "Google Play Music Desktop Player" which presents a Google login screen:
This is in a standalone window with no URL displayed. Although I have no reason not to trust ...
5
votes
1
answer
4k
views
What are the disadvantages of Google Safe Browsing?
I'm currently undertaking my thesis regarding phishing detection. I understand that Google Safe Browsing relies on a constantly updated blacklist in order to classify webpages. Their blacklist does ...
0
votes
3
answers
390
views
Next steps to get rid of malware? [duplicate]
My father in law just had a problem,He clicked on a link in an email (he was using gmail on the version 35.0.1916.114m of Chrome), and suddenly the computer sort of went black, and possibly something ...
1
vote
1
answer
1k
views
How can this be possible? (malware autoinstall on chrome)
I have a website, using an ads service (qadabra). Yesterday some users reported me that the ads service sometimes redirects to a site containing malware.
the url is this:
PLEASE DON'T OPEN IT, IT ...
3
votes
1
answer
197
views
Google Chrome Apps phishing
What prevents an attacker from copying and pasting a Chrome packaged app (which is just a zipped web app) then distributing it on the Chrome webstore under a slightly different name?
7
votes
1
answer
661
views
Google Chrome & Spear-phishing
I've been trying to find some information on how Google Chrome detects phishing pages that are not already in their blacklists. The most relevant information that I've found from Google itself, states:...
3
votes
1
answer
1k
views
How Browsers prevents Malware and Phishing attacks
I want to know how phishing and malware protection features are implemented in modern browsers like Chrome, Firefox, IE etc. Are these features heuristic based, or do browsers maintain a list of ...