Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

Filter by
Sorted by
Tagged with
0 votes
0 answers
26 views

I mistakenly clicked an .htm attachment from an spam email, help?

I messed up... I opened the htm file using chrome and entered my password... Upon realising that it wasn't a legit attachment, I immediately changed my Microsoft account password. However, I don't ...
user avatar
2 votes
0 answers
63 views

Receiving phishing text messages

I get a phishing messages on SMS every now and then. I'm not sure if it's from anyone that knows me. What information can I get about the sender of the SMS?
user avatar
0 votes
0 answers
29 views

Crafting phishing emails in foreign languages

Interesting one that occurred to me as I was out this morning. Obviously Russia is currently being smashed left, right and centre, and equally obviously, phishing emails are route 1 into any ...
user avatar
0 votes
3 answers
88 views

Is a hardware based 2FA more resistant to phishing than SMS or TOTP?

As I understand, modern phishing is kind of like a man-in-the-middle attack. Let's say, for example that User u has an account in Domain d where he has an SMS based 2FA enabled. This is what the ...
user avatar
0 votes
0 answers
8 views

Click on a link in a malicious email - how can i be hacked? [duplicate]

I accidentally clicked a link in a malicious email. The link has opened in my browser. I have not entered any username and password to login in. Could I have been hacked? I'd like to know what could ...
user avatar
1 vote
1 answer
48 views

Phishing: can input data be saved before I hit the button?

I just clicked a phishing link and foolishly entered my credit card details. I realized it was phishing before I hit SUBMIT. Is there a chance I exposed my data?
user avatar
0 votes
3 answers
272 views

Why are FIDO2 protected SSH keys affected by phishing attacks?

The OpenSSH developers have written in a description of the "agent restrictions" feature that FIDO2 tokens are vulnerable to phishing attacks: https://www.openssh.com/agent-restrict.html ...
user avatar
1 vote
0 answers
59 views

Is there a standard for fencing email domains to specific use cases?

To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases. If it exists, I would presume that this might limit phishing attacks. Think of my question ...
user avatar
2 votes
0 answers
53 views

Yahoo sent folders contains unsubscribe emails (And they aren't from me)

I continue to see emails in my sent folder that I haven't sent. I change my password and it stops for a few days only to return. What could they be? Why would yahoo send unsubscribe emails? Example: ...
user avatar
0 votes
1 answer
71 views

Making a phishing link look innocent

Situation I am learning about phishing attacks using OSINT, social engineering and some Kali tools to send a mail to a dedicated target, which contains an 'appealing' message and an ngrok link leading ...
user avatar
0 votes
1 answer
429 views

How does this scam email from a seemingly legit domain work?

I received a strange email from security@facebookmail.com. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me ...
user avatar
  • 105
3 votes
0 answers
105 views

Phishing? All websites show the same, wrong certificate

today I went to my Online-Banking by typing in the correct domain name in Firefox. I could login and even see my actual balance. Then within the site a warning appeared that I should do a test-...
user avatar
0 votes
1 answer
86 views

How did the email pass DKIM?

I am trying to figure out how this one phishing email (used our Company's domain as from) was able to bypass the O365 Spamfilter. Looking at the Header it looks like they passed the DKIM even though ...
user avatar
  • 3
0 votes
1 answer
70 views

Phishing and emails from icloud.com

Recently, various companies have been sending me emails from addresses like support_at_example_com_r1a8nd4o6m7@icloud.com. I used to be able to determine if an email was not a phishing email by ...
user avatar
19 votes
3 answers
3k views

Should I visit a website of a popular company if the browser warns of a potential security risk?

I have faced this situation several times. Some websites are presented as a potential security risk. Should I continue to browse such a webpage? I am attaching one example, just an example. Actually I ...
user avatar
  • 291
0 votes
1 answer
56 views

What are the possible consequences of clicking a link in a phishing mail? [duplicate]

I clicked on a Google Slides spoof link in an email in Yahoo mail in a Chrome browser. As soon as I had clicked it I realized my mistake. I did not enter any password or give away info. What are the ...
user avatar
  • 101
1 vote
0 answers
200 views

A PDF ran GetAdaptersAddresses. Should I be concerned?

I received and opened a PDF that ran: GetTickCount IsDebuggerPresent SetWindowsHookExW Sleep GetAdaptersAddresses These are the 2 files it wrote: C:\Windows\ServiceProfiles\LocalService\AppData\...
user avatar
4 votes
0 answers
180 views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
user avatar
  • 141
0 votes
1 answer
58 views

Cpanel Phising Link

Today I received a cpanel phishing link and I clicked on it. It redirected to another cpanel. I decide to look at the url, and here it is redirect url https://example.net/esg9/cpanel.php?token=...
user avatar
0 votes
2 answers
1k views

Can an HTML attachment in an email contain a virus?

I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
user avatar
1 vote
4 answers
281 views

Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?

One big threat out there is typosquat domains. For example instead of: steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login. Why do ...
user avatar
  • 31
0 votes
0 answers
72 views

Accidentally clicked on a malicious URL that on later research lead to a dead URL. Could it have done anything/were my precautions good?

First time question after lurking every so often. This issue has me a little riled, and would love to know more on how I did/if it did anything, as well as peace of mind on the subject. Today/morning, ...
user avatar
0 votes
1 answer
106 views

Purpose of fraudulent AWS SL/TLS certificate request for my domain

I just received an email from AWS re Certificate request for [my personal domain]. This email asked me to approve this request with a link or forward to a AWS email for validation. Needless to say ...
user avatar
0 votes
1 answer
149 views

Is it a myth that signing up for social media puts your email open for phishing attacks?

So far I have owned a Google profile since 2016, and I had no problems until now when I began detecting unusual/bizarre messages in my 'Spam' folder. This suspects me that operating a social ...
user avatar
  • 1
1 vote
1 answer
113 views

Random garbage in phishing [duplicate]

What does it mean when an obvious scam e-mail, possibly "mere" phishing, includes in (whatever we call its signing-off small-print) what looks like a pointless list of dozens, perhaps ...
user avatar
0 votes
3 answers
177 views

Is it safe to open email links in a private window?

Sometimes there are links on the email you have to click because they are agrements, but they are coming from a different URL. As of now what I'm doing is opening a private window and pasting the link ...
user avatar
  • 363
0 votes
0 answers
97 views

How to detect and prevent phishing attacks on Gmail via Logging and DLP?

We did a phishing engagement on a client both payload and credential phishing. The first was using shortened file sharing links (including Google Drive) of our payloads and the second was a duplicate ...
user avatar
0 votes
2 answers
258 views

Why are there so many special characters in this phishing link?

I recently looked at a spam mail I received. Generally, I'd say it was a fairly standard phishing attempt, but one thing struck me as odd: The link that victims are supposed to click looks very weird ...
user avatar
24 votes
3 answers
4k views

Browser is accepting italic/bold Unicode as part of SPAM email's URL

This is truly crazy. I received a SPAM email in which there is a URL crafted from apparent Unicode characters that surprisingly exist for italic/bold letters, which when I reported it to Google's spam ...
user avatar
  • 351
0 votes
0 answers
46 views

WP Blog with phishing js file by a Google Search Result? [duplicate]

I wanted to check the WP homepage of a friend of mine, so I googled "rafaeltheissen be piano". The first Google result seems to point to the official page: https://rafaeltheissen.com/ Here ...
user avatar
5 votes
0 answers
352 views

Windows Defender catches Trojan right after clean install

I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
user avatar
  • 51
0 votes
1 answer
1k views

Is this is phishing attempt?

I received an email, purporting to be from Microsoft Account as a Security Alert. The address looks legit (account-security-noreply@accountprotection.microsoft.com) but the problem is, the email ...
user avatar
3 votes
0 answers
237 views

Are external email warnings effective?

Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
user avatar
1 vote
0 answers
103 views

Guessable oauth client id and phishing

OAuth manual advises that the client ID should not be easily guessable to decrease phishing attacks. https://www.oauth.com/oauth2-servers/client-registration/client-id-secret/ Is it still the case ...
user avatar
0 votes
1 answer
97 views

Link test differs from link location in plaintext view is not visible in Thunderbird

Today I noticed something strange. I got an email containing a link that links to another site than the text says. In (Simple) HTML, the review is visible when hovering over the link. However, in ...
user avatar
  • 422
0 votes
0 answers
86 views

ThinkPHP show my website as the req.host - did the request really come from my web server?

I have ThinkPHP wordpress garbage coming at my server https://medium.com/@knownsec404team/analysis-of-thinkphp5-remote-code-execution-vulnerability-5de8a0afb2d4 , for example: /public/index.php?s=...
user avatar
-1 votes
1 answer
689 views

Malicious looking mirrors resembling trademarked websites? Phishing?

I honestly have no idea what this is. Reddit has a growing number of users posting far-right misinformation constantly. Googling their usernames shows a whole list of results, many of which don't ...
user avatar
1 vote
2 answers
235 views

Scamming explanation

I've just received a scam SMS with that invite me to click on a link to check a delivery. Since I was curious about where it could lead, I opened a VM and set up a VPN, then clicked on the link. After ...
user avatar
  • 13
1 vote
1 answer
174 views

How dangerous are phishing links really?

Some phishing links contain random digits / codes (e.g: https://refno1234.example.com). For such links, is there an increased risk by clicking on them because the unique code could be matched to your ...
user avatar
  • 809
0 votes
1 answer
511 views

Can a text file disguised as .xlsm be malicious?

A hour ago we receive a suspicious mail targeting some of our mailing lists. It contains a .zip file, itself containing a .xlsm file. This .xlsm file appears to be recognized as an ASCII text file ...
user avatar
  • 101
0 votes
0 answers
90 views

I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]

Screenshot: The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com. The suspicious link "Unsubscribe_click_here" is: mailto:cr@burlondesti....
user avatar
1 vote
0 answers
45 views

Is this a Phishing email a bit more advanced than usual? [duplicate]

I received an email from a friend, but it was not them. It was their name in the sender field but there was a different email address hidden underneath. There was a zip file attachment. But here’s the ...
user avatar
  • 11
1 vote
2 answers
327 views

Phishing emails sent to my contacts, from another contact [duplicate]

Some people on my email contact list have been receiving phishing emails that appear to come from someone else on my contact list. The people receiving the emails and the person purportedly sending ...
user avatar
4 votes
0 answers
266 views

What is "JavaGhost - Mass Twilio Checker"?

Over the past week, the account credentials for my organization's Twilio account were stolen and used to send ~10,000 fraudulent SMS messages claiming to be from a major bank. The passwords have all ...
user avatar
  • 1,331
1 vote
0 answers
147 views

Cmd line tool to scan an eml file against spam/phishing rules [closed]

For a purpose of a security class I want to demonstrate a threat delivered via email. As a demo message I want to use an eml file that contains a banking-themed pdf attachment, requiring further ...
user avatar
  • 11
58 votes
4 answers
9k views

What is the purpose of a targeted email without any meaningful content?

I received an email to my corporate email account from an external Gmail account. The list of recipients clearly shows (an eventually successful) attempt to guess my email address based on my personal ...
user avatar
  • 683
3 votes
2 answers
262 views

How can a phishing page know my account information?

I clicked on a phishing website. I was surprised to find that this website looked exactly like google and had my information displayed. The information displayed were my email and my profile picture. ...
user avatar
  • 33
35 votes
6 answers
5k views

How to protect against SIM swap scammers?

SIM swap occurs where the scammer uses phished information about you to request a SIM card replacement from your cell phone carrier, by tricking them into believing that it is you who is making the ...
user avatar
15 votes
6 answers
3k views

Does phishing include ransomware?

Does the definition of phishing also include tricking the victim into executing malware, such as ransomware, that's not used to retrieve the victim's information? As I see it, Wikipedia's definition ...
user avatar
0 votes
2 answers
153 views

Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)

In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
user avatar

1
2 3 4 5
11