Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

0
votes
0answers
24 views

Looking for training courses on Advance phishing and social engineering [on hold]

I am looking for a training that goes in depth on creating effective phishing exercises and social engineering stuffs. Displaying an effective way to get into a the network through a phishing email or ...
0
votes
0answers
64 views

How to prevent fake OAuth consent screens?

I can't find an answer to this simple question about delegated authorisation: When using a mobile app, how can a user be sure that a consent screen (let's say Google or Facebook) is a real one? The ...
88
votes
12answers
15k views

When is phishing education going too far? [closed]

I currently work on the IT security team at my workplace in a senior role. Recently, I assisted management in designing the phishing / social engineering training campaigns, by which IT security will ...
0
votes
0answers
41 views

Where can I find a database which consist of a list of Phishing websites URL [closed]

I want a large no. of phishing websites URL. For example just like phishtank which has a database consisting of website's urls which have been reported as phishing all over the world.
43
votes
8answers
7k views

Is it ever safe to open a suspicious HTML file (e.g. email attachment)?

If I receive an email that has an attachment called something like safe-link.html would it ever be safe to open this file? Clearly, HTML files may have malicious scripts embedded that could run when ...
2
votes
1answer
87 views

OAuth: how to prevent phishing with malicious redirect URIs

To quote the OAuth spec: If the resource owner denies the access request or if the request fails for reasons other than a missing or invalid redirection URI, the authorization server informs the ...
26
votes
5answers
8k views

How could a scammer know the apps on my phone / iTunes account?

I received an email with the subject "Your invoice from Apple #xxxxx". It then continues by: "[...] your payment from "Pokemon Go was accepted [...]". That line made me sceptical. I just downloaded ...
0
votes
2answers
101 views

Opened a phising email on school email

Hello I opened this email sent to my school email and I realized it was a phising email. And now my OCD and anxiety are going haywire. Is it possible I got infected? I did not click on any links. I ...
2
votes
1answer
115 views

Why are my emails going to spam?

I have been trying to learn about phishing emails. I have read up quite a bit on it. I setup a domain somthing.tk (free domain), hosted a website on a VPS (Digital Ocean). Set up my own mail transfer ...
0
votes
1answer
107 views

What's the payload of this phishing campaign (which I clicked)?

I've been really dumb and clicked a phishing link. The link arrived via WhatsApp and consists of: A Nubank está fazendo aniversário e quem ganha o presente é você!. São 2.000 convites para um novo ...
114
votes
5answers
18k views

Why do phishing e-mails use faked e-mail addresses instead of the real one?

I read that you can write anything into the From: field of an e-mail. If that is true, then why are phishing e-mails trying to trick me with look-a-like addresses like service@amaz0n.com instead of ...
0
votes
1answer
147 views

What is the endgame of a site like this?

I came across the following ad: It's in Dutch, and the title seems to be a mix of autogenerated words to probably create as much of a clickbait title as possible. The ad goes to the following page: ...
3
votes
1answer
146 views

Possible Phishing Attempt?

I use an iPhone. Today I got a text from an unknown number starting from +65. The message was "your one-time Wifi password is xxxx and it’s valid for only 10 minutes". Thought it was a scam and ...
2
votes
0answers
73 views

Gmail (Dot) Phishing Attack From Avalanche Botnet

I'm a full-stack web developer working in a small startup and have been wearing many hats as a result. I am by no means a cyber or information security expert. I'm looking for a general evaluation of ...
0
votes
1answer
108 views

Triaging malicious URLs

I'm quite new to the security field and learning my ways on how to triage certain events. One such alert that I see is "Phishing" when a user clicks on a malicious link. As far as triaging to see if ...
2
votes
1answer
164 views

Why would a scammer ask for creation of a new email account?

I recently received the following email: Good day my dear friend, I am contacting you to help get the deposit (£8.5 million pounds), my late client Engineer Alexander left in his Bank before ...
3
votes
1answer
61 views

Block Outbound Connections by Country

We want to reduce the number of phishing sites that our users can get to. Would it be useful or more problematic to block outbound connections by geo IP? We already block many inbound connections by ...
3
votes
1answer
137 views

My website got blacklisted as “phishing”. Any hints on how to avoid that?

I have a personal website hosted using my provider's DNS name (i.e. myname.provider.com) on my personal hardware at home. The web server (both HTTP and HTTPS) is Apache on Debian Wheezy (which is ...
0
votes
3answers
94 views

Shared terminal security hole

I want to ask you about what I think is a pretty obvious security hole and what can be done about it. Suppose my library has a room containing network-connected workstations serving Linux. You log on ...
0
votes
1answer
72 views

An authentication protocol to prevent phishing & solve the problem of password reuse?

When writing about best practices for authentication, I find that today's best practices still leave gaping holes in security, specifically not solving the problem of password reuse by users - ...
1
vote
0answers
55 views

What would you do as first day of CSO or Head of CyberSecurity [closed]

I was asked this question at an interview today and was unable to give a structured answer since there is so many things a head of security can do. The additional info that I had were : - You can ...
1
vote
1answer
77 views

Strange phishing email

I received a strange phishing email the other day that seemed to use span tags to encode "hidden" values within the email's body: <meta http-equiv="Content-Type" content="text/html; charset=utf-8"&...
1
vote
3answers
655 views

Accidentally clicked a phishing link, am I at risk?

I clicked a link from a fake Twitch streamer and now I'm scared of being spied on. I typed my account details but didn't actually sent them because I realized it was a fake link right before clicking ...
2
votes
0answers
87 views

What does this phishing email achieve? [duplicate]

The email is formatted as an email from Google notifying me that I need to respond to an intrusion attempt on my account. There are no other links other than these href mailto links ("Oui Moi!" and "...
2
votes
1answer
295 views

How is this website redirect working?

Someone sent me a URL via WhatsApp (httpx://cadburys-prizes[.]com) that allegedly lets me claim a free box of chocolates. Obviously this is fake and I've seen similar websites before. If I view the ...
1
vote
0answers
74 views

Possible phishing victim. How to proceed? [closed]

I was trying to buy tickets for a show on an official web page. This will be the last show of this band so the server went down pretty quickly. The band tweeted about difficulties and then someone ...
-1
votes
1answer
109 views

Can we infect our system by opening a email with outlook 2016?

I read that it is possible to get a virus just by opening a mail (not even clicking at any links on it or opening the attachments), because scripts can be attached to it. Is this also true for ...
1
vote
1answer
57 views

What's the use of DKIM/SPF if it only validates the Enveloppe From?

DKIM and SPF are mentioned as powerful mitigations for having your domain abused for phishing. But when I send a mail like this: Return-Path: <me@mydomain.example.com> From: Citibank security ...
-1
votes
1answer
52 views

Check emails are genuine [closed]

unitedstatescustoms66@gmail.com tescoextrashippingcompany147@gmail.com I have received messages from the email letting me know about luggages and parcel being sent a soldier whom I have been talking ...
1
vote
3answers
79 views

Would Gmail server be able to protect me from phishing attacks if I'm using a stock email app on Android?

I have a Gmail account and I am using Samsung email app. Recently I have switched to the Gmail app because I thought using the Gmail app would be safer because that app would automatically filter ...
0
votes
1answer
83 views

How can a router or my ISP protect against phishing? [duplicate]

I see a few services advertising the ability to protect against phishing and ransomware attacks. ISPs sell services which supposedly protect you and some routers like Check Point 700/900 series. Is ...
2
votes
2answers
121 views

Does U2F prevent phishing of passwords?

U2F is touted as a new 2 factor authentication standard that has built in defense against phishing attacks. As I understand it, this works by registering the device with each service, thereby creating ...
1
vote
1answer
272 views

Send GET request from a PDF file

I'm currently working on a security Proof Of Concept where I need to show the danger of opening an unknown PDF file. Internet says that many malwares use Javascript in PDF document (AcroJS) to ...
0
votes
1answer
89 views

Why are there no browser feature or extension to only check the domain and username to prevent phishing?

One of the recommendations to prevent phishing using look-alike domain names (like www.google.com.phishing.org or IDN homograph attacks) is to use a password manager or a physical security token like ...
2
votes
3answers
384 views

Should I enter fake password to phishing site?

Hope I have chosen correct forum to ask this question. The other day it happened to me. I got e-mail from my admins requesting me to update my password. "Not again" I mouthed and clicked the link. ...
0
votes
1answer
322 views

SEToolkit Not Cloning Login Page

I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
2
votes
1answer
293 views

What are Outlook's safe links? [closed]

People using outlook.com as their mailbox may know this: If you receive an e-mail with a web link in it and copy the link with "right-click + copy link location" you will receive an outlook protection ...
1
vote
1answer
301 views

Outlook was redirected to the server clblgn.sceur.ch to get new settings

I (that is, we, our company) has clicked on "Allow" when Outlook has presented us with a redirect to autodiscover-s.outlook.com on our macs to get new settings. Today, we got a popup asking to connect ...
2
votes
2answers
188 views

How do I protect myself against SIM hijacking/social engineering?

There are several posts like these: https://medium.com/@N/how-i-lost-my-50-000-twitter-username-24eb09e026dd https://motherboard.vice.com/en_us/article/5984zn/listen-to-sim-jacking-account-ransom-...
1
vote
3answers
400 views

Is this a phishing email?

I've just received the strangest email: I don't understand why anyone would send an email like this. It doesn't look to be asking for credentials of any kind. Is this a scam which is designed for ...
0
votes
1answer
234 views

Why hasn't the one-click attack taken over the world?

This is a follow-up question related to Is single-click phishing possible?. If such a convenient attack is possible, I assume everyone on the internet should already be hacked. Why hasn't that ...
2
votes
2answers
222 views

Is single-click phishing possible?

For Chrome, IE/Edge, Safari, Firefox, Opera released after 2018, is it possible for a phishing to succeed by just enticing a user to click a URL? Notice: The user only does a click on the URL, no ...
1
vote
1answer
207 views

Phishing email repository for analysis [closed]

Is there a repository of known phishing emails somewhere that is available for analysis purposes? I want to test some mitigation theories and need a good collection of data to test against.
-1
votes
1answer
30 views

Whois History resources authentic source

I have couple of doubts related to Whois records. For a particulate domain... How authentic are the Whois records? As per my research the records are not permissible in courts (or at least would ...
-1
votes
1answer
221 views

People using my email address (and only that) for booking hotels. What kind of scam is this?

I have faced the same issue twice: 2 people, whose names are definitely not the same as mine, used my email address to book hotels through a well-known hotel company and a lesser-known hotel booking ...
1
vote
0answers
76 views

Website marked as dangerous (phishing) in the past. How to get off blacklists? [duplicate]

One of our clients got his website infected almost a year ago. The site indeed contained some malicious files on the FTP server, and it got marked as dangerous, with suspicion of phishing attempts. A ...
0
votes
1answer
77 views

How to handle a phishing site?

I launched my company website a month ago, now when I google using website name a phishing site that has exactly copied my site appears in the first page. It also has a better rank than my website ...
1
vote
1answer
171 views

What is this phishing technique called using subdomains

I'm writing a blog post analyzing a list of phishing domains and I'm coming across a lot of IDN homograph attack domains and these "subdomain attack domains" but I cannot find the technical/good way ...
2
votes
1answer
162 views

Is this phishing? How can I be sure? And what can be gained?

Yesterday I received an email that I assumed/hoped was legitimately from a prospective employer that I interviewed with several weeks ago. The timing of the email couldn't have made more sense as they ...
1
vote
2answers
86 views

Why would a phishing blacklist be hashed?

I was planning to comment on the question at Finding phishing sites to certain domain and suggest searching Google's blacklist for keywords or substrings of a domain name in question. But then I ...