Questions tagged [phishing]

Phishing is an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site which asks the user to re-enter the personal information and in this way steels it.

Filter by
Sorted by
Tagged with
26
votes
5answers
9k views

How could a scammer know the apps on my phone / iTunes account?

I received an email with the subject "Your invoice from Apple #xxxxx". It then continues by: "[...] your payment from "Pokemon Go was accepted [...]". That line made me sceptical. I just downloaded ...
0
votes
1answer
120 views

How does this scam email from a seemingly legit domain work?

I received a strange email from security@facebookmail.com. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me ...
3
votes
2answers
474 views

Possible Phishing Attempt?

I use an iPhone. Today I got a text from an unknown number starting from +65. The message was "your one-time Wifi password is xxxx and it’s valid for only 10 minutes". Thought it was a scam and ...
3
votes
0answers
75 views

Phishing? All websites show the same, wrong certificate

today I went to my Online-Banking by typing in the correct domain name in Firefox. I could login and even see my actual balance. Then within the site a warning appeared that I should do a test-...
0
votes
1answer
53 views

How did the email pass DKIM?

I am trying to figure out how this one phishing email (used our Company's domain as from) was able to bypass the O365 Spamfilter. Looking at the Header it looks like they passed the DKIM even though ...
0
votes
1answer
55 views

Phishing and emails from icloud.com

Recently, various companies have been sending me emails from addresses like support_at_example_com_r1a8nd4o6m7@icloud.com. I used to be able to determine if an email was not a phishing email by ...
19
votes
3answers
3k views

Should I visit a website of a popular company if the browser warns of a potential security risk?

I have faced this situation several times. Some websites are presented as a potential security risk. Should I continue to browse such a webpage? I am attaching one example, just an example. Actually I ...
0
votes
1answer
44 views

What are the possible consequences of clicking a link in a phishing mail? [duplicate]

I clicked on a Google Slides spoof link in an email in Yahoo mail in a Chrome browser. As soon as I had clicked it I realized my mistake. I did not enter any password or give away info. What are the ...
4
votes
2answers
873 views

OpenID Connect/OAuth 2.0 and "fake" official apps

My question mostly pertains to OpenID Connect, but can be applied to OAuth 2.0 as well. When it comes to an OpenID Connect Client doing the "authorize" dance with the OpenID Connect Provider, the ...
8
votes
2answers
4k views

Did scammers take control of a subdomain to host phishing site?

This morning I received a text message (ostensibly) from my bank: We need to contact you. Please visit https://paymentassistance.nationwide.co.uk for more information My spidey sense immediately ...
1
vote
0answers
104 views

A PDF ran GetAdaptersAddresses. Should I be concerned?

I received and opened a PDF that ran: GetTickCount IsDebuggerPresent SetWindowsHookExW Sleep GetAdaptersAddresses These are the 2 files it wrote: C:\Windows\ServiceProfiles\LocalService\AppData\...
3
votes
0answers
99 views

Disturbing/suspicious Google notifications about account recovery and password change

This is similar to Is this Google mail from gaia.bounces.google.com legit?, except a) I have nothing in my life related to the language used (Indonesian), b) these are different notifications (and ...
0
votes
2answers
335 views

Plausible PayPal phishing... with no evidence credentials were stolen

Yesterday my housemate was almost scammed by someone on the internet, or so I thought. She was selling some goods on a ebay-like website, and someone contacted her to buy her stuff. She then received ...
0
votes
1answer
42 views

Cpanel Phising Link

Today I received a cpanel phishing link and I clicked on it. It redirected to another cpanel. I decide to look at the url, and here it is redirect url https://example.net/esg9/cpanel.php?token=...
58
votes
4answers
8k views

What is the purpose of a targeted email without any meaningful content?

I received an email to my corporate email account from an external Gmail account. The list of recipients clearly shows (an eventually successful) attempt to guess my email address based on my personal ...
0
votes
2answers
295 views

Can an HTML attachment in an email contain a virus?

I received an email from an old colleague asking me to take a look at an attachment. The email didn’t seem suspicious at all, it contained all the right logos, etc. When I opened the attachment it ...
0
votes
1answer
220 views

Is it possible to setup a phishing “honeypot” for proof-of-concept purposes without getting the host/IP blacklisted?

In the company I work for, we have many clients and the vast majority of them have hosting with us and we make their web apps. One client, though, just applied for cyber security. Our CEH (certified ...
0
votes
1answer
1k views

Is this is phishing attempt?

I received an email, purporting to be from Microsoft Account as a Security Alert. The address looks legit (account-security-noreply@accountprotection.microsoft.com) but the problem is, the email ...
1
vote
4answers
265 views

Why don't bigger companies buy similar domains to their main domain to prevent typosquatting?

One big threat out there is typosquat domains. For example instead of: steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login. Why do ...
0
votes
0answers
63 views

Accidentally clicked on a malicious URL that on later research lead to a dead URL. Could it have done anything/were my precautions good?

First time question after lurking every so often. This issue has me a little riled, and would love to know more on how I did/if it did anything, as well as peace of mind on the subject. Today/morning, ...
51
votes
5answers
9k views

New Hires get phishing emails very quickly - Reasoning and how to stop

We hired a new Sales Ops member 1 week ago. Within a week he's getting emails similar to the below: I did some research on the sender and it is a valid email, valid person, SPF/DKIM checks come ...
0
votes
1answer
161 views

Redirection - Different Website from Different Computer

There are URLs which its only purpose is to redirect the HTTP requestor to a correct website. Say, if I tried to access example.com/0wa/RaNd0m from my computer, it would redirect me to wikipedia.com. ...
0
votes
1answer
140 views

Is it a myth that signing up for social media puts your email open for phishing attacks?

So far I have owned a Google profile since 2016, and I had no problems until now when I began detecting unusual/bizarre messages in my 'Spam' folder. This suspects me that operating a social ...
123
votes
5answers
19k views

Why do phishing e-mails use faked e-mail addresses instead of the real one?

I read that you can write anything into the From: field of an e-mail. If that is true, then why are phishing e-mails trying to trick me with look-a-like addresses like service@amaz0n.com instead of ...
0
votes
1answer
228 views

How was the hacker able to get my Instagram tag through Facebook when they weren’t linked?

All of this happened on 18th November 2020 A person I know sent me a phishing link of Facebook then Google, I entered my credentials however as soon as I found out that its a phishing link, I turned ...
2
votes
1answer
232 views

Suspicious GitHub mirror site (https://hzb.world/)

Through some odd Google rabbit hole, I ended up at what appeared to be the GitHub website. I reflexively tried logging in to view my repositories. Upon attempting to log in, it said my browser did ...
0
votes
2answers
2k views

PayPal phishing attempt?

[This is a "soft" question and as such I'm not sure it's appropriate for this site. However, it does involve information security.] I have an email address, me@gmail.com that is not associated with ...
7
votes
4answers
10k views

Is a safelinks.protection.outlook.com link phishing?

Received an email which contain the below hyperlink https://nam02.safelinks.protection.outlook.com/?url=http*3A*2F*2Factuallysale.com*2F&data=02*7C01*7C*7C548d20ace3ec4747fe1008d7d7d8b597*...
0
votes
1answer
87 views

Purpose of fraudulent AWS SL/TLS certificate request for my domain

I just received an email from AWS re Certificate request for [my personal domain]. This email asked me to approve this request with a link or forward to a AWS email for validation. Needless to say ...
1
vote
1answer
225 views

Forged linkedin invitation phishing? How does it work?

I get a steady stream of phishing emails but this one is really weird. I keep getting an email that appears extremely legitimate from Linkedin. I knew something was wrong with it however because it ...
1
vote
1answer
102 views

Random garbage in phishing [duplicate]

What does it mean when an obvious scam e-mail, possibly "mere" phishing, includes in (whatever we call its signing-off small-print) what looks like a pointless list of dozens, perhaps ...
0
votes
3answers
165 views

Is it safe to open email links in a private window?

Sometimes there are links on the email you have to click because they are agrements, but they are coming from a different URL. As of now what I'm doing is opening a private window and pasting the link ...
0
votes
0answers
89 views

How to detect and prevent phishing attacks on Gmail via Logging and DLP?

We did a phishing engagement on a client both payload and credential phishing. The first was using shortened file sharing links (including Google Drive) of our payloads and the second was a duplicate ...
24
votes
3answers
4k views

Browser is accepting italic/bold Unicode as part of SPAM email's URL

This is truly crazy. I received a SPAM email in which there is a URL crafted from apparent Unicode characters that surprisingly exist for italic/bold letters, which when I reported it to Google's spam ...
0
votes
2answers
241 views

Why are there so many special characters in this phishing link?

I recently looked at a spam mail I received. Generally, I'd say it was a fairly standard phishing attempt, but one thing struck me as odd: The link that victims are supposed to click looks very weird ...
16
votes
6answers
5k views

How do I investigate where personal information in a fraudulent email was leaked from?

I have seen an email which is obvious from the content that it's a phishing/spurious email. However, the personal content is quite revealing and specific to that individual. How could I go about ...
0
votes
0answers
46 views

WP Blog with phishing js file by a Google Search Result? [duplicate]

I wanted to check the WP homepage of a friend of mine, so I googled "rafaeltheissen be piano". The first Google result seems to point to the official page: https://rafaeltheissen.com/ Here ...
5
votes
0answers
320 views

Windows Defender catches Trojan right after clean install

I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
1
vote
2answers
9k views

What should I do if I'm receiving Tiktok verification code even I don't use and have deleted the application in my android device?

What should I do if I'm receiving SMS on phone giving in verification code of TikTok app despite I have deleted and no longer use the application in my Android device? I got an international call ...
0
votes
1answer
4k views

Can I be hacked just by watching a stream from a youtube channel that is being hacked?

A few days ago I joined a stream on a youtube channel that I later discovered was being hacked. That got me thinking. Is it possible to have been infected with some type of virus just by accessing the ...
0
votes
2answers
1k views

Conducting Ethical Phishing Attack [closed]

For research purposes, I'm conducting an ethical phishing attack in my institution. I have permission from the institution for the same. I've created the phishing site and the email content, and I'll ...
1
vote
1answer
233 views

Cutting down phishing attacks from AmazonSES

I am trying to work on cutting down on the amount of spam, phishing, and malicious emails coming through via AmazonSES burners. Has anyone devised a method or certain IOCs to block on?
3
votes
0answers
196 views

Are external email warnings effective?

Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
1
vote
0answers
85 views

Guessable oauth client id and phishing

OAuth manual advises that the client ID should not be easily guessable to decrease phishing attacks. https://www.oauth.com/oauth2-servers/client-registration/client-id-secret/ Is it still the case ...
0
votes
0answers
94 views

I clicked on a Phishing url but I didn't have password saved, am I at risk? [duplicate]

I clicked on a phishing URL and immediately realized that it was a phishing site and I closed the page. I didn't enter any info and I didn't have credentials saved in the browser (Opera). I have few ...
0
votes
1answer
91 views

Link test differs from link location in plaintext view is not visible in Thunderbird

Today I noticed something strange. I got an email containing a link that links to another site than the text says. In (Simple) HTML, the review is visible when hovering over the link. However, in ...
-1
votes
1answer
508 views

Malicious looking mirrors resembling trademarked websites? Phishing?

I honestly have no idea what this is. Reddit has a growing number of users posting far-right misinformation constantly. Googling their usernames shows a whole list of results, many of which don't ...
0
votes
0answers
75 views

ThinkPHP show my website as the req.host - did the request really come from my web server?

I have ThinkPHP wordpress garbage coming at my server https://medium.com/@knownsec404team/analysis-of-thinkphp5-remote-code-execution-vulnerability-5de8a0afb2d4 , for example: /public/index.php?s=...
1
vote
2answers
221 views

Scamming explanation

I've just received a scam SMS with that invite me to click on a link to check a delivery. Since I was curious about where it could lead, I opened a VM and set up a VPN, then clicked on the link. After ...
0
votes
0answers
25 views

How can a phishing attempt SMS be sent by the same number as the legitimate company? [duplicate]

My bank (let's call it theBank; it's a trusted bank in a Scandinavian country) uses among other methods SMS prompts. When performing an action (e.g. payment), you are sent an SMS containing a code ...

1
2 3 4 5
11