Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

Filter by
Sorted by
Tagged with
0
votes
0answers
43 views

Accidentally clicked spam email link on android, risk of malware? [closed]

I was browsing my spam folder on my phone in the gmail app and stupidly let curiosity get the better of me. The app had blocked images by default but I clicked to allow them as well as accidentally ...
0
votes
1answer
82 views

Do pharma hacks always redirect to attacker page or can it also be ads on the legit website’s page?

I'm trying to understand how a pharma hack works. Let's say someone searches for some illegal drug on google and clicks on a link with a domain name www.example.com. Will that person be redirected ...
0
votes
2answers
96 views

Phishing emails - What do I look for?

I want to be able to spot a phishing email. What are the things to check when investigating and doing forensics on one? There are some things I know to look for already but I want to get moer ...
1
vote
2answers
88 views

What is the best way to protect against a phishing attack?

As stated in the title, what can I do on the server (or anywhere else for that matter) to protect against phishing attacks? Some suggestions I've heard is to tell users that you'll never send them a ...
6
votes
2answers
2k views

Is phishing ineffective against a Gmail account that has 2FA? [closed]

According to my knowledge, phishing basically only steals the email id and password, right?
1
vote
0answers
38 views

Name of security measure that shows user a personal word / phrase / drawing [duplicate]

I remember a security measure I've seen on a few sites in the past against phishing, but I don't know what it's called. When the user logs in, or just inputs their username, the site shows some kind ...
0
votes
0answers
11 views

My Joomla WebSite Phished [duplicate]

My website is wirten in Joomla. The provider turned it off saying it has been phished. REQUIRES PHILIPPINES PROXY TO VIEW IP Address: 178.32.141.220 Phishing Content: hxxps://www .officinadelle11 ....
-2
votes
1answer
105 views

Is there a way I can shut down this phishing website? [closed]

I found a fake PayPal phishing website, and I want to shut it down, I have run my script that sends many requests to this website with randomize emails and password, but it is not fully shut it down. ...
1
vote
3answers
160 views

If we integrate CDR in our email solution, do we really need Sandbox as well?

In the case of social engineering attack vector is an email sent with a malicious attachment like XSL file, I am not really understanding where we will need Sandbox solution if we can just use CDR (...
1
vote
1answer
59 views

No MX Records on a Possible Phishing domain?

I saw on my SMTP logs that it queried a possible phishing domain, I look up on its MX records and it didn't have one. Does the domain need an MX record before sending phishing emails?
0
votes
0answers
54 views

Effectiveness and ethics of flooding phishing websites with fake data as a countermeasure

Today, I got a phishing email impersonating a large bank. To my surprise, the link in the email pointed at a rather sophisticated phishing website which could potentially result in many victims. The ...
2
votes
2answers
78 views

How should failures by a single user on a simulated phishing email be measured?

I work in the IT Security function of my company as a team lead. We periodically send out phishing emails to all users on company network as a form of continuous education of users on how to spot ...
7
votes
3answers
2k views

Surely I haven't won the lottery, but where's the scam?

Some time ago I received the following message on my personal mobile phone number: YOUR MOBILE NUMBER HAS WON 780,000EURO IN THE WORLD LOTTO END OF YEAR PROMO.FOR CLAIMS EMAIL(NAME/ADDRESS/PHONE) ...
0
votes
1answer
107 views

Phishing urls from shnpoc.net/McAfee?

I was looking into my websites traffic and found few entries from a subdomain for shnpoc.net domain. And when I looked into it, it was transparent proxying my website. On checking further, I found ...
0
votes
0answers
26 views

Safe way to open potentially compromised attachments [duplicate]

I have in my inbox what I believe to be (95% sure) a phishing attack email or my IT department doing a phishing attack knowledge awareness campaign. I'm a very curious person by nature and I'd like ...
1
vote
0answers
57 views

Is there a way to forward unknown land line callers to a specific number in a manner similar to nomorobo? [closed]

My parents are getting up there in age and recently, my dad asked me about a message on his answering machine from "Apple" saying his account was "compromised". After having educated him on phishing ...
2
votes
0answers
86 views

Is there a name for creating a malicious subdomain under of legit domains, like XXbadsiteXX.blob.core.windows.net?

This is similar to domain shadowing, but there is no compromise taking place of a registrar account; these sites let users create subdomains. I was wondering if there is a proper name for this kind of ...
3
votes
0answers
46 views

Why an invisible iframe to logout from Office in a Office phishing?

In a phishing page for Office account (login mimicking the normal login page and stealing the credentials through a simple ajax request, then navigating to a dummy public google doc), attackers have ...
0
votes
0answers
21 views

Website Marked as Phising by Edge [duplicate]

I handle a joomla website (https://dom-ng.eu) which is marked as unsafe by Microsoft Edge but not Chrome an others. The site is flagged with a phishing threat and i tried to fix the issue but it's not ...
0
votes
0answers
27 views

Phishing attacks in internal messages within a web application

Let's say there is a web application called "FooBar" which allows users to connect and send messages to each other. It is also allowed to include links in these messages. Let us further assume that an ...
2
votes
1answer
56 views

Why we should not allow our pages to be loaded through Iframe by unknown hosts?

One of OWASP recomendations is to set the header X-Frame-Options to allow our pages to be loaded in Iframes only by sameorigin. One reason is because of phishing attacks, ok I understand. But if I ...
1
vote
1answer
154 views

SMS not received and read by somebody else (no SIM swap)?

A friend of mine was phished for his credit card details and driving license. Very foolish, I know. The criminals then bought bitcoin. The fact is his card is VbV. He claims not to have received any ...
2
votes
1answer
129 views

I received an phishing email from myself [duplicate]

So today when I was checking my spam folder on my outlook account, I noticed I had received an email from my own address. The email looks like a typical scam: Claims to have installed a RAT on my ...
2
votes
1answer
42 views

Known methods/techniques for thwarting credential phising attacks

Is the solution to preventing credential phising attacks is really only 'educating' people about it? For the sake of this question, let us assume that I have a web application that takes a username ...
7
votes
1answer
1k views

How Concerning Is This X-CU-modified: FAKECU Text Attack?

A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
0
votes
1answer
150 views

Is there a way to download the Firefox Phishing and Malware Protection list?

I'm building an app that needs to check bad websites and was wondering if there is a way to download the Firefox bad site list directly outside of the browser? The list is described in the Mozilla.org ...
2
votes
1answer
104 views

How can I as middleman verify whether a phishing site is valid if the scam listens only on the referrer link and blocks any other access methods?

How can I as a trusted user of a middleman company (such as PhishTank) verify whether a phishing site is valid if the scam listens only on a unique referrer link(randomly created) and is blocking any ...
0
votes
2answers
90 views

Incident response to a medium scale phishing attack whereas the targets are not from our company?

Our company suffered a phishing attack yesterday. While investigating about the attacker and the potential employees of ours who might have been phished, we ended up with the attacker database of ...
0
votes
0answers
27 views

How can I download and read a file that might be spear fishing? [duplicate]

My colleague has forwarded me an email and asked "Can you please check for me if it is genuine?" I'm just a programmer, so I have no idea. The email is from a website called PDFfiller, which seems ...
1
vote
1answer
165 views

Why would a stranger offer to write content for a nonexistent blog?

I get emails like this all the time: Hello dear, I’m a long time reader. I’m writing to you because I’d love to contribute a guest post on your website. I’ve been brainstorming some topics that I ...
0
votes
1answer
201 views

Email phishing, understand mail header

I try to understand phishing email received from an attacker: Received: .... Received: .... Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=; helo= envelope-from:attacker@...
1
vote
3answers
150 views

How to tell if an email source is spoofed?

I've received an email to my gmail account from FCMB, a bank in Nigeria (flashing warning lights already). It's not addressed to me (i.e., the email starts off "Dear Daniel," [not my name]). But the ...
3
votes
1answer
177 views

Would it be possible for me to become infected just by opening a Facebook message?

I received one of those obvious fake "is this you?" and some fake Youtube link on Facebook Messenger. I don't know what it redirected to as I didn't click it (I only hovered over it to see if it was a ...
0
votes
3answers
211 views

Can phishing site URL shorten into numbers?

A suspected hacker was trying to get the user to input those numbers (2412958) in their address book. And user knows that the numbers are weird. Can URLs be shortened in texts like that?
21
votes
4answers
5k views

Redacting URLs as an email-phishing preventative?

In a large organization (e.g., a city staff), relying on human behavior to prevent phishing attacks isn't nearly effective enough. While it would be somewhat inconvenient (security usually is), I'm ...
0
votes
0answers
50 views

Received Google calendar invite but no organizer?

Whenever my wife and I invite each-other to an event which we create we always see the organizer above the guest but this spam invite does not have one. How is this possible? Can I achieve this?
2
votes
3answers
233 views

Why is it not possible for browsers to completely detect the Phishing pages?

The browsers have some capability to detect the phishing pages, but they are not able to detect all. Why is that? Phishing still remains to be one of the most convenient way to hacking. Why is it not ...
0
votes
2answers
184 views

How does someone know i clicked a link in an email? URL spoofing? JSON?

How do hackers/scammers know that I clicked a link? Why is my personal info in the url redirect link? Is this info then being stored in a database and the hacker/scammer knows that because this ...
1
vote
1answer
143 views

Mindlessly clicked days old phishing email link appeared dead

Was multitasking and mindlessly clicked Squarespace phishing email. Page didn't load, and right away I realized my mistake. Completed several malware scans which came back clean. The button link ...
0
votes
1answer
70 views

Phishing emails and securing set up from compromise?

I'm a one-man company and I'm getting a lot of phishing emails very similar to the emails from companies I use. Some of these companies and the emails we exchange are very unique. How would these ...
2
votes
0answers
109 views

Suspicious GitHub mirror site (https://hzb.world/)

Through some odd Google rabbit hole, I ended up at what appeared to be the GitHub website. I reflexively tried logging in to view my repositories. Upon attempting to log in, it said my browser did ...
1
vote
0answers
23 views

SMS spoofing detection [duplicate]

Our company uses SMS delivery providers like Nexmo etc. We have noticed some of our recipients have received phishing sms messages from fraudsters where the number/sender name was spoofed to match our ...
2
votes
1answer
184 views

Mystery link containing fragment identifier in malicious email

The following link was received in a suspected phishing attack email. Unfortunately, the recipient clicked on the link in their outlook client: <tr> <td class="m_-[string-of-19-numbers]...
0
votes
0answers
47 views

How do i ensure that links are from OneDrive / Google Drive?

I am currently working on a messaging system that integrates GoogleDrive and OneDrive links as attachments. I am using the Google and OneDrive filepickers to obtain the links to be attached, which are ...
7
votes
3answers
7k views

Unknown automatically generated email in sent folder

I just noticed a strange email in my sent folder that I did not send. Here is the header information: To: 5f3d36eb61801dda4063@cloudmailin.net From: ********@gmail.com Date: Mon, 10 Jun 2019 06:54:17 ...
0
votes
1answer
129 views

Spam/Phishing detection when there is no MX record

While SPF/DKIM/DMARC are standard, foundational tools to help protect an email-sending domain from spoofing, what about domains that do not send emails? How do spam or phishing filters treat emails ...
16
votes
4answers
10k views

Is it a good security practice to force employees hide their employer to avoid being targeted?

A young tech company which operates on sensitive data has employees that fall victim to phishing/porting scams despite its best efforts to instill security fobs, vpn, password managers, non-sms 2FA, ...
1
vote
3answers
329 views

Why would a scammer not reply with the same email?

I was recently messaged over a website of an online marketplace regarding an advertisement of an item I was selling, whereupon the "buyer" asked me to contact them over an email they provided. After ...
0
votes
1answer
57 views

Whitelist Simulated phishing landing page

We are running a simulated phishing campaign and one of the landing pages has been blacklisted by google. If you try to visit it in chrome you get the big, red warning page "Deceptive site ahead" (...
1
vote
1answer
138 views

Phising test failed e-mail to my personal account, how does this scam work?

I've recently gotten a pair of "User Selkie has failed the phishing test" emails to my personal account. The email has no other information, no links or anything, and while I'm not going to respond to ...

1 2 3 4 5 9