Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

Filter by
Sorted by
Tagged with
0 votes
1 answer
210 views

Protect from phishing in MS Teams

Yesterday I received an odd message on MS Teams (a phishing attempt) that I've not seen before. The message is made to look like it includes 2 parties; 1 internal and 1 external, in addition to myself....
JohnLBevan's user avatar
1 vote
2 answers
319 views

Is it bad practice to prompt users to reset password when there is no evidence of a breach?

I have received many security emails from LinkedIn over the past few weeks. An example is shown below (redaction mine) I do not live in the USA and I did not try to access LinkedIn at the times these ...
Josh's user avatar
  • 111
0 votes
1 answer
111 views

Obfuscated HTML [closed]

I'm looking at a potential phishing site and I see that some of the HTML is obfuscated. It's not Base64. All the links look like this: <link href="6bkaQeQe69e/st-...
Robert909's user avatar
0 votes
1 answer
172 views

How to prevent credential stealing of customers via phishing and domain squatting

Threat actors are creating lookalike domains (ex. Telecom.com to te1ecom.com), and using those to phish users for credentials (not employees). They’re getting the MFA tokens, too. What could be done ...
Kumar's user avatar
  • 1
0 votes
2 answers
189 views

What's the risk of interacting with a social engineer?

I received a WhatsApp message. I never registed with any recruitment job portal, or even speak Arabic at all What are the dangers in myself trying to find out what happened (did they send the same ...
George Ntoulos's user avatar
1 vote
0 answers
181 views

how can you tell if phishing email link was clicked by using logs [closed]

100 employees of a company received an email with a phishing link, How can I tell who clicked on the email phishing link and how many got infected with malware? 3 logs were given, email log, web ...
Haqqi's user avatar
  • 11
1 vote
1 answer
152 views

Is FIDO authN vulnerable to relay attacks?

In this question: Is FIDO2 authentication vulnerable to a social engineering replay attack? it was answered that no, not vulnerable because "the keypair used to by the FIDO device to authenticate ...
Allexj's user avatar
  • 137
2 votes
0 answers
253 views

WordPress site hacked [closed]

We got hacked. Our setup: DigitalOcean VPS, Apache, multiple domains & WP websites, Elementor Pro, hopefully safe plugins. Known facts: It's phishing. The virus infects all the websites on our ...
Ni Amon's user avatar
  • 29
0 votes
0 answers
77 views

Phishing mails to hidden Azure mailboxes

After some research, I couldn't find a clear answer: in Azure Cloud Domain, some users received phishing emails to hidden mailbox addresses. How can that be? How can those mailbox addresses be known ...
Loay's user avatar
  • 1
0 votes
2 answers
187 views

Why don't we sandbox email clients company-wide?

Following on to questions like Sandbox for attachment accessment and How do I safely inspect a suspicious email attachment?. Why don't we sandbox email clients company-wide? I must be missing ...
Danny Schoemann's user avatar
1 vote
1 answer
151 views

Measures to safeguard against ZeroFont phishing attack

What measures can be taken to safeguard against ZeroFont phishing attacks (setting font size to zero), and how can email security settings assist in the detection of ZeroFont elements and the ...
Maideen Asbak's user avatar
0 votes
1 answer
3k views

Is this google security alert legit?

I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
Alpha-Craft's user avatar
1 vote
1 answer
277 views

Spoof email is using my domain name email address but target almost only my contact list with credible content body

Since yesterday, one of my work email addresses is used to send spoof emails with phishing attachments. SPF and DKIM was configured on my domain name but not DMARC, but since yesterday in the evening, ...
morfane's user avatar
  • 11
2 votes
1 answer
152 views

Distinguish origin of password prompts

I am wondering how to distinguish (password) prompts that the OS issued from prompts that are delivered application-side. This question first occurred to me when considering Firefox master passwords, ...
kaiyazeera's user avatar
1 vote
0 answers
101 views

Impersonating phishing incident [closed]

An email has been circulated with the username of our organization, with some internal users and also to the customers. Observed that IP 40.92.46.74, which is Microsoft one. We have been using our ...
Nani's user avatar
  • 111
1 vote
0 answers
507 views

I caught myself in the middle of a phishing scam

I got caught up in a phishing scam where I conducted an automated interview with emails that appeared legitimate from real people within my college. I did respond to multiple emails and the only ...
eric's user avatar
  • 11
1 vote
1 answer
882 views

How are hardware keys phishing resistant to man-in-the-middle attacks?

I've heard that hardware keys like Yubikey are phishing resistant. But I do not understand where a phished man-in-the-middle attack, which tries to "forward" the whole communication, fails ...
Gere's user avatar
  • 147
1 vote
0 answers
98 views

Can an attacker steal one's credentials if they never ask for it? [closed]

Can a website that never asks for one's credentials still steal one's credentials? If yes, how?
Allure's user avatar
  • 499
1 vote
1 answer
302 views

"Phishing Attack Ahead" warning on Apple Mail link preview

I received a suspicious email and moved it to my spam folder. I kept getting the same email so I blocked the sender. I got curious about the link in it and pressed the dropdown arrow on Mac mail to ...
user288845's user avatar
0 votes
0 answers
26 views

I clicked what looked like an Amazon email, but it (maybe) was from an Amazon affiliate. Ended up at Amazon.com anyway. Can I safely investigate? [duplicate]

In a case of clicking too fast, I clicked on a picture that looked like it was from Amazon. However this was not the case. I did end up at Amazon, but I'm aware that other things could've taken place ...
Moochcar's user avatar
1 vote
2 answers
263 views

DNS hijacking/poisoning effect on URL/URI and password manager autotype/autofill

A benefit to password managers, at least some of them, is that they can look at the URL and only use autotype/autofill when on the correct site, which can help prevent pharming since if instead of ...
vertigo's user avatar
  • 13
0 votes
2 answers
305 views

Should I take action if I receive a phishing email that passes all email sender checks?

I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was ...
Esteban's user avatar
  • 133
0 votes
1 answer
315 views

Can I avoid phishing attacks by putting in the wrong password first before logging in?

Here's my logic. The only reason someone would phish you is to get your credentials. That means they don't know your credentials. Thus, if you try to login to their fake website, they can't be sure ...
Some Guy's user avatar
  • 115
2 votes
2 answers
305 views

Does attaching malware or virus in an email count as Phishing attack

I know that Phishing attacks try to gain access or sensitive information from the user or victim. This attack comes under the Social Engineering attack, where personal confidential data such as login ...
test test's user avatar
36 votes
4 answers
6k views

What is the purpose of hiding spam links in some obscure forum posts?

I'm moderating one small Discourse forum and we, like everyone else, get spammers from time to time. Our forum is small, like 40-60 weekly unique visitors. Our forum requires that each new user's ...
Tommy's user avatar
  • 533
3 votes
1 answer
248 views

Why does M365 keep accepting phishing emails that Gmail rejects?

At my work email, which is handled by MS Office 365 Outlook, I keep getting phishing emails, typically 3 times a week, usually with some attachment "your company's monthly financial report" ...
Sebastian's user avatar
0 votes
1 answer
179 views

Why is physical security key helpful, since most accounts have alternative 2FA methods a hacker could use?

I would like to know why a physical security key is useful to have as default 2FA method given most accounts have some form of account recovery/alternative 2FA method. Google has had a bunch of ...
Aegis's user avatar
  • 103
1 vote
2 answers
521 views

Why are @microsoft.com e-mail address not protected against spoofing

I got a lot of phishing attempts that appear to come from an actual microsoft.com e-mail address (see I need some verification about unusual login emails) I though this was odd, since I had hoped that ...
Hilmar's user avatar
  • 121
0 votes
0 answers
16 views

What should I do when I received spam emails? [duplicate]

I got these emails from a spammer to my inbox, I am not sure if these are phishing attempt. I can't tell. Click on one of them, I see this I checked the codes behind that mail, I see smtp.mailfrom=...
code-8's user avatar
  • 125
1 vote
2 answers
133 views

Are brand-new DNS registrations an easy way to detect phishing?

Today I received an SMS AusPost: Your package address is incorrect and delivery failed, please update address information via the link. https://auspost.requestupdate.com If I do a whois auspost....
Ross's user avatar
  • 223
0 votes
1 answer
222 views

How can I filter out phishing e-mails containing malware using Gmail?

I use gmail, and about 3 weeks ago I started getting a couple e-mails a day from random sources. All of the e-mails contain gibberish text like this: 6 5 4 8 2586 8016 70170 2 1 08 05 60 172 01 ...
Mordred's user avatar
  • 203
0 votes
1 answer
240 views

How to detect phishing emails in the future?

My main tactic (amongst others, see related questions) of how I detect phishing emails are through the use of the obviously wrong sender domain. I see a trend that big companies start to use dedicated ...
Emanuel Graf's user avatar
1 vote
1 answer
215 views

Actual domain names in phising posts?

I received a paypal scam email yesterday in the mail(*), which isn't particularly noteworthy, apart from the fact that not only was the sender paypal.com but the post was sent from mx4.slc.paypal.com. ...
Karlth's user avatar
  • 111
0 votes
1 answer
197 views

What is best practise to send credit card details update emails when the details have expired?

Recently an organization I forgot to update credit card details had my renewal payment fail because I forgot to update details. They sent an email as below which had a direct link to a web form ...
Darryn Brisdaz's user avatar
3 votes
1 answer
781 views

Is FIDO2 authentication vulnerable to a social engineering replay attack?

I'm starting to learn about the FIDO2 standard, and I'm wondering if this scenario is possible... Victim visits a credential harvesting page and enters their credentials Credential harvesting backend ...
Sean W.'s user avatar
  • 845
1 vote
1 answer
316 views

How to hunt for phishing websites?

I am a researcher and want to test our phishing website identification tools, but we don't want to rely on any already-identified phishing sites. Instead, we want to find fresh potential phishing ...
dovod74538's user avatar
1 vote
1 answer
101 views

How to deal with these legit-looking major-company phishing emails? [closed]

I'm having trouble figuring out to best identify or deal with phishing spoofs when the email address in the FROM field looks legit. Like From: [email protected] that I can tell ...
SteveExdia's user avatar
2 votes
0 answers
123 views

Receiving phishing text messages

I get a phishing messages on SMS every now and then. I'm not sure if it's from anyone that knows me. What information can I get about the sender of the SMS?
Elec Hill's user avatar
3 votes
3 answers
1k views

Is a hardware based 2FA more resistant to phishing than SMS or TOTP?

As I understand, modern phishing is kind of like a man-in-the-middle attack. Let's say, for example that User u has an account in Domain d where he has an SMS based 2FA enabled. This is what the ...
Agnishom Chattopadhyay's user avatar
1 vote
1 answer
112 views

Phishing: can input data be saved before I hit the button?

I just clicked a phishing link and foolishly entered my credit card details. I realized it was phishing before I hit SUBMIT. Is there a chance I exposed my data?
Illia Strikhar's user avatar
1 vote
3 answers
2k views

Why are FIDO2 protected SSH keys affected by phishing attacks?

The OpenSSH developers have written in a description of the "agent restrictions" feature that FIDO2 tokens are vulnerable to phishing attacks: https://www.openssh.com/agent-restrict.html ...
student_at_work's user avatar
1 vote
0 answers
103 views

Is there a standard for fencing email domains to specific use cases?

To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases. If it exists, I would presume that this might limit phishing attacks. Think of my question ...
Caleb Faruki's user avatar
1 vote
0 answers
810 views

Yahoo sent folders contains unsubscribe emails (And they aren't from me)

I continue to see emails in my sent folder that I haven't sent. I change my password and it stops for a few days only to return. What could they be? Why would yahoo send unsubscribe emails? Example: ...
Sherry W's user avatar
0 votes
1 answer
1k views

Making a phishing link look innocent

Situation I am learning about phishing attacks using OSINT, social engineering and some Kali tools to send a mail to a dedicated target, which contains an 'appealing' message and an ngrok link leading ...
Caeleste's user avatar
  • 103
0 votes
1 answer
3k views

How does this scam email from a seemingly legit domain work?

I received a strange email from [email protected]. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me ...
hb20007's user avatar
  • 559
4 votes
0 answers
1k views

Phishing? All websites show the same, wrong certificate

today I went to my Online-Banking by typing in the correct domain name in Firefox. I could login and even see my actual balance. Then within the site a warning appeared that I should do a test-...
TheGermanGuy's user avatar
0 votes
1 answer
573 views

How did the email pass DKIM?

I am trying to figure out how this one phishing email (used our Company's domain as from) was able to bypass the O365 Spamfilter. Looking at the Header it looks like they passed the DKIM even though ...
Lephas's user avatar
  • 3
0 votes
1 answer
726 views

Phishing and emails from icloud.com

Recently, various companies have been sending me emails from addresses like [email protected]. I used to be able to determine if an email was not a phishing email by ...
user avatar
19 votes
3 answers
4k views

Should I visit a website of a popular company if the browser warns of a potential security risk?

I have faced this situation several times. Some websites are presented as a potential security risk. Should I continue to browse such a webpage? I am attaching one example, just an example. Actually I ...
paki eng's user avatar
  • 291
0 votes
1 answer
586 views

What are the possible consequences of clicking a link in a phishing mail? [duplicate]

I clicked on a Google Slides spoof link in an email in Yahoo mail in a Chrome browser. As soon as I had clicked it I realized my mistake. I did not enter any password or give away info. What are the ...
Andy's user avatar
  • 101

1
2 3 4 5
12