Questions tagged [phishing]
Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.
549
questions
-1
votes
0
answers
24
views
GPO to turn off and disable the reader pane in Outlook for Office 365?
Is there an admx file to disable the Reading Pane in Outlook 365 to prevent Phishing?
I looked here but I don't see anything of the sort.
- 1,385
0
votes
1
answer
299
views
Is this google security alert legit?
I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
0
votes
1
answer
110
views
Spoof email is using my domain name email address but target almost only my contact list with credible content body
Since yesterday, one of my work email addresses is used to send spoof emails with phishing attachments. SPF and DKIM was configured on my domain name but not DMARC, but since yesterday in the evening, ...
- 1
2
votes
1
answer
108
views
Distinguish origin of password prompts
I am wondering how to distinguish (password) prompts that the OS issued from prompts that are delivered application-side. This question first occurred to me when considering Firefox master passwords, ...
- 21
1
vote
0
answers
57
views
Impersonating phishing incident [closed]
An email has been circulated with the username of our organization, with some internal users and also to the customers. Observed that IP 40.92.46.74, which is Microsoft one. We have been using our ...
- 111
1
vote
0
answers
327
views
I caught myself in the middle of a phishing scam
I got caught up in a phishing scam where I conducted an automated interview with emails that appeared legitimate from real people within my college.
I did respond to multiple emails and the only ...
- 11
1
vote
1
answer
353
views
How are hardware keys phishing resistant to man-in-the-middle attacks?
I've heard that hardware keys like Yubikey are phishing resistant. But I do not understand where a phished man-in-the-middle attack, which tries to "forward" the whole communication, fails ...
- 137
1
vote
0
answers
55
views
Can an attacker steal one's credentials if they never ask for it? [closed]
Can a website that never asks for one's credentials still steal one's credentials?
If yes, how?
- 509
1
vote
1
answer
152
views
"Phishing Attack Ahead" warning on Apple Mail link preview
I received a suspicious email and moved it to my spam folder. I kept getting the same email so I blocked the sender.
I got curious about the link in it and pressed the dropdown arrow on Mac mail to ...
- 11
0
votes
0
answers
26
views
I clicked what looked like an Amazon email, but it (maybe) was from an Amazon affiliate. Ended up at Amazon.com anyway. Can I safely investigate? [duplicate]
In a case of clicking too fast, I clicked on a picture that looked like it was from Amazon. However this was not the case. I did end up at Amazon, but I'm aware that other things could've taken place ...
- 1
1
vote
2
answers
147
views
DNS hijacking/poisoning effect on URL/URI and password manager autotype/autofill
A benefit to password managers, at least some of them, is that they can look at the URL and only use autotype/autofill when on the correct site, which can help prevent pharming since if instead of ...
- 13
0
votes
2
answers
162
views
Should I take action if I receive a phishing email that passes all email sender checks?
I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was ...
- 133
0
votes
1
answer
189
views
Can I avoid phishing attacks by putting in the wrong password first before logging in?
Here's my logic. The only reason someone would phish you is to get your credentials. That means they don't know your credentials. Thus, if you try to login to their fake website, they can't be sure ...
- 115
2
votes
2
answers
260
views
Does attaching malware or virus in an email count as Phishing attack
I know that Phishing attacks try to gain access or sensitive information from the user or victim. This attack comes under the Social Engineering attack, where personal confidential data such as login ...
37
votes
4
answers
6k
views
What is the purpose of hiding spam links in some obscure forum posts?
I'm moderating one small Discourse forum and we, like everyone else, get spammers from time to time. Our forum is small, like 40-60 weekly unique visitors. Our forum requires that each new user's ...
- 533
3
votes
1
answer
136
views
Why does M365 keep accepting phishing emails that Gmail rejects?
At my work email, which is handled by MS Office 365 Outlook, I keep getting phishing emails, typically 3 times a week, usually with some attachment "your company's monthly financial report" ...
- 31
0
votes
1
answer
108
views
Why is physical security key helpful, since most accounts have alternative 2FA methods a hacker could use?
I would like to know why a physical security key is useful to have as default 2FA method given most accounts have some form of account recovery/alternative 2FA method. Google has had a bunch of ...
- 103
1
vote
2
answers
348
views
Why are @microsoft.com e-mail address not protected against spoofing
I got a lot of phishing attempts that appear to come from an actual microsoft.com e-mail address (see I need some verification about unusual login emails)
I though this was odd, since I had hoped that ...
- 121
0
votes
0
answers
16
views
What should I do when I received spam emails? [duplicate]
I got these emails from a spammer to my inbox, I am not sure if these are phishing attempt. I can't tell.
Click on one of them, I see this
I checked the codes behind that mail, I see
smtp.mailfrom=...
- 125
1
vote
2
answers
95
views
Are brand-new DNS registrations an easy way to detect phishing?
Today I received an SMS
AusPost: Your package address is incorrect and delivery failed, please
update address information via the link.
https://auspost.requestupdate.com
If I do a whois auspost....
- 223
0
votes
1
answer
158
views
How can I filter out phishing e-mails containing malware using Gmail?
I use gmail, and about 3 weeks ago I started getting a couple e-mails a day from random sources. All of the e-mails contain gibberish text like this:
6 5 4 8 2586 8016 70170
2 1 08 05 60 172 01 ...
- 183
0
votes
1
answer
170
views
How to detect phishing emails in the future?
My main tactic (amongst others, see related questions) of how I detect phishing emails are through the use of the obviously wrong sender domain.
I see a trend that big companies start to use dedicated ...
- 101
1
vote
1
answer
153
views
Actual domain names in phising posts?
I received a paypal scam email yesterday in the mail(*), which isn't particularly noteworthy, apart from the fact that not only was the sender paypal.com but the post was sent from mx4.slc.paypal.com.
...
- 111
0
votes
1
answer
102
views
What is best practise to send credit card details update emails when the details have expired?
Recently an organization I forgot to update credit card details had my renewal payment fail because I forgot to update details. They sent an email as below which had a direct link to a web form ...
- 111
3
votes
1
answer
527
views
Is FIDO2 authentication vulnerable to a social engineering replay attack?
I'm starting to learn about the FIDO2 standard, and I'm wondering if this scenario is possible...
Victim visits a credential harvesting page and enters their credentials
Credential harvesting backend ...
- 835
1
vote
1
answer
127
views
How to hunt for phishing websites?
I am a researcher and want to test our phishing website identification tools, but we don't want to rely on any already-identified phishing sites. Instead, we want to find fresh potential phishing ...
- 15
1
vote
1
answer
63
views
How to deal with these legit-looking major-company phishing emails? [closed]
I'm having trouble figuring out to best identify or deal with phishing spoofs when the email address in the FROM field looks legit. Like From: NORTONquic[email protected] that I can tell ...
- 111
2
votes
0
answers
88
views
Receiving phishing text messages
I get a phishing messages on SMS every now and then. I'm not sure if it's from anyone that knows me.
What information can I get about the sender of the SMS?
- 21
3
votes
3
answers
960
views
Is a hardware based 2FA more resistant to phishing than SMS or TOTP?
As I understand, modern phishing is kind of like a man-in-the-middle attack. Let's say, for example that User u has an account in Domain d where he has an SMS based 2FA enabled. This is what the ...
1
vote
1
answer
59
views
Phishing: can input data be saved before I hit the button?
I just clicked a phishing link and foolishly entered my credit card details. I realized it was phishing before I hit SUBMIT. Is there a chance I exposed my data?
0
votes
3
answers
2k
views
Why are FIDO2 protected SSH keys affected by phishing attacks?
The OpenSSH developers have written in a description of the "agent restrictions" feature that FIDO2 tokens are vulnerable to phishing attacks: https://www.openssh.com/agent-restrict.html
...
- 101
1
vote
0
answers
68
views
Is there a standard for fencing email domains to specific use cases?
To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases.
If it exists, I would presume that this might limit phishing attacks. Think of my question ...
- 195
1
vote
0
answers
472
views
Yahoo sent folders contains unsubscribe emails (And they aren't from me)
I continue to see emails in my sent folder that I haven't sent. I change my password and it stops for a few days only to return. What could they be? Why would yahoo send unsubscribe emails?
Example: ...
- 11
0
votes
1
answer
675
views
Making a phishing link look innocent
Situation
I am learning about phishing attacks using OSINT, social engineering and some Kali tools to send a mail to a dedicated target, which contains an 'appealing' message and an ngrok link leading ...
- 103
0
votes
1
answer
2k
views
How does this scam email from a seemingly legit domain work?
I received a strange email from [email protected]. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me ...
- 105
4
votes
0
answers
444
views
Phishing? All websites show the same, wrong certificate
today I went to my Online-Banking by typing in the correct domain name in Firefox. I could login and even see my actual balance.
Then within the site a warning appeared that I should do a test-...
- 41
0
votes
1
answer
364
views
How did the email pass DKIM?
I am trying to figure out how this one phishing email (used our Company's domain as from) was able to bypass the O365 Spamfilter.
Looking at the Header it looks like they passed the DKIM even though ...
- 3
0
votes
1
answer
323
views
Phishing and emails from icloud.com
Recently, various companies have been sending me emails from addresses like
[email protected].
I used to be able to determine if an email was not a phishing email by ...
user272187
19
votes
3
answers
3k
views
Should I visit a website of a popular company if the browser warns of a potential security risk?
I have faced this situation several times. Some websites are presented as a potential security risk. Should I continue to browse such a webpage?
I am attaching one example, just an example. Actually I ...
- 291
0
votes
1
answer
300
views
What are the possible consequences of clicking a link in a phishing mail? [duplicate]
I clicked on a Google Slides spoof link in an email in Yahoo mail in a Chrome browser.
As soon as I had clicked it I realized my mistake. I did not enter any password or give away info.
What are the ...
- 101
1
vote
0
answers
388
views
A PDF ran GetAdaptersAddresses. Should I be concerned?
I received and opened a PDF that ran:
GetTickCount
IsDebuggerPresent
SetWindowsHookExW
Sleep
GetAdaptersAddresses
These are the 2 files it wrote:
C:\Windows\ServiceProfiles\LocalService\AppData\...
- 11
5
votes
0
answers
916
views
Disturbing/suspicious Google notifications about account recovery and password change
This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
- 151
0
votes
1
answer
117
views
Cpanel Phising Link
Today I received a cpanel phishing link and I clicked on it. It redirected to another cpanel. I decide to look at the url, and here it is
redirect url
https://example.net/esg9/cpanel.php?token=...
0
votes
2
answers
4k
views
Can an HTML attachment in an email contain a virus?
I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
2
votes
4
answers
335
views
Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?
One big threat out there is typosquat domains. For example instead of:
steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login.
Why do ...
- 41
0
votes
1
answer
201
views
Purpose of fraudulent AWS SL/TLS certificate request for my domain
I just received an email from AWS re Certificate request for [my personal domain].
This email asked me to approve this request with a link or forward to a AWS email for validation.
Needless to say ...
- 101
0
votes
1
answer
160
views
Is it a myth that signing up for social media puts your email open for phishing attacks?
So far I have owned a Google profile since 2016, and I had no problems until now when I began detecting unusual/bizarre messages in my 'Spam' folder.
This suspects me that operating a social ...
- 1
1
vote
1
answer
128
views
Random garbage in phishing [duplicate]
What does it mean when an obvious scam e-mail, possibly "mere" phishing, includes in (whatever we call its signing-off small-print) what looks like a pointless list of dozens, perhaps ...
- 142
0
votes
3
answers
262
views
Is it safe to open email links in a private window?
Sometimes there are links on the email you have to click because they are agrements, but they are coming from a different URL. As of now what I'm doing is opening a private window and pasting the link ...
- 363
0
votes
2
answers
332
views
Why are there so many special characters in this phishing link?
I recently looked at a spam mail I received. Generally, I'd say it was a fairly standard phishing attempt, but one thing struck me as odd:
The link that victims are supposed to click looks very weird ...
- 101